Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#35372 - [iputils] ping loses ability to function over time

Attached to Project: Arch Linux
Opened by John (graysky) - Sunday, 19 May 2013, 22:42 GMT
Last edited by Stéphane Gaudreault (stephane) - Tuesday, 28 May 2013, 15:05 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Stéphane Gaudreault (stephane)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description: For reasons I cannot pin point, /usr/bin/ping loses the ability to function. Basically, if I call it to ping a host, I get an error about icmp open sockets not be permitted. I see no smoking gun in my logs to explain it.

Example in the broken state:
% ping www.google.com
ping: icmp open socket: Operation not permitted

% pacman -Qkk iputils
warning: iputils: /etc/xinetd.d/tftp (Modification time mismatch)
iputils: 27 total files, 1 altered file

% md5sum $(which ping)
3ea12ddd6efc9c66f949c820c184bdf7 /usr/bin/ping

% ls -l $(which ping)
-rwxr-xr-x 1 root root 40008 May 14 06:50 /usr/bin/ping

I can recover functionality simply by reinstalling the package:

% sudo pacman -S iputils
warning: iputils-20121221-2 is up to date -- reinstalling
...

% ping www.google.com
PING www.google.com (74.125.225.211) 56(84) bytes of data.
64 bytes from den03s06-in-f19.1e100.net (74.125.225.211): icmp_seq=1 ttl=50 time=37.3 ms

% pacman -Qkk iputils
warning: iputils: /etc/xinetd.d/tftp (Modification time mismatch)
iputils: 27 total files, 1 altered file

% md5sum $(which ping)
3ea12ddd6efc9c66f949c820c184bdf7 /usr/bin/ping

% ls -l $(which ping)
-rwxr-xr-x 1 root root 40008 May 14 06:50 /usr/bin/ping

Additional info:
* package version(s) iputils 20121221-2

Steps to reproduce:
Unfortunately, this happens seemingly randomly, but has happened over 6 times to me over the past year.
This task depends upon

Closed by  Stéphane Gaudreault (stephane)
Tuesday, 28 May 2013, 15:05 GMT
Reason for closing:  Works for me
Comment by Stéphane Gaudreault (stephane) - Monday, 20 May 2013, 13:30 GMT
I cannot tell what is going on here exactly, but this kind of error message usually occurs when the executable loses its capabilities. If it happens again, try

sudo setcap cap_net_raw=ep /usr/bin/ping{,6}

If it works, try to figure out why the capabilities changed.

Loading...