cirros-dev / cirros

116 stars 33 forks source link

Set filecap for traceroute #99

Closed osfrickler closed 1 year ago

osfrickler commented 1 year ago

The traceroute command needs the NET_RAW capability in order to be able to run with icmp (-I option) for non-root users. Since capabilities are not preserved during our build process nor when copying from the ramdisk to the root-fs, we explicitly set the capability during boot.

Signed-off-by: Dr. Jens Harbott harbott@osism.tech