From c40d34a692f16f2858f4d80b31174317ac92ef1f Mon Sep 17 00:00:00 2001 From: Jaroslav Klech Date: Sep 21 2019 12:51:09 +0000 Subject: [PATCH 1/2] Describes issue #376 --- diff --git a/modules/release-notes/pages/sysadmin/Kernel.adoc b/modules/release-notes/pages/sysadmin/Kernel.adoc index a5f7301..f9f30c8 100644 --- a/modules/release-notes/pages/sysadmin/Kernel.adoc +++ b/modules/release-notes/pages/sysadmin/Kernel.adoc @@ -3,3 +3,10 @@ include::{partialsdir}/entities.adoc[] [[sect-kernel]] = Kernel + +[[ping-group-range]] +== Enable net.ipv4.ping_group_range + +Fedora {PRODVER} now supports the `net.ipv4.ping_group_range` kernel parameter for all user groups. This change enables all users to create the Internet Control Message Protocol (ICMP) Echo sockets without using the `setuid` binaries, or having the `CAP_NET_ADMIN` and `CAP_NET_RAW` file capabilities. + +As a result, the rootless `podman` containers are now able to use the `ping` utility. This change applies also to users developing on the *Fedora Silverblue* variant, who use containers created through the `toolbox` utility. \ No newline at end of file From d2690f9d93a6d31cbe35399bb2e84673b036c1a4 Mon Sep 17 00:00:00 2001 From: Jaroslav Klech Date: Sep 25 2019 15:32:31 +0000 Subject: [PATCH 2/2] Applies SME feedback --- diff --git a/modules/release-notes/pages/sysadmin/Kernel.adoc b/modules/release-notes/pages/sysadmin/Kernel.adoc index f9f30c8..f54321a 100644 --- a/modules/release-notes/pages/sysadmin/Kernel.adoc +++ b/modules/release-notes/pages/sysadmin/Kernel.adoc @@ -7,6 +7,6 @@ include::{partialsdir}/entities.adoc[] [[ping-group-range]] == Enable net.ipv4.ping_group_range -Fedora {PRODVER} now supports the `net.ipv4.ping_group_range` kernel parameter for all user groups. This change enables all users to create the Internet Control Message Protocol (ICMP) Echo sockets without using the `setuid` binaries, or having the `CAP_NET_ADMIN` and `CAP_NET_RAW` file capabilities. +Fedora 31 now supports the `net.ipv4.ping_group_range` kernel parameter for all user groups. This change enables all users to create Internet Control Message Protocol (ICMP) Echo sockets without using the `setuid` binaries, or having the `CAP_NET_ADMIN` and `CAP_NET_RAW` file capabilities. As a result, the rootless `podman` containers are now able to use the `ping` utility. This change applies also to users developing on the *Fedora Silverblue* variant, who use containers created through the `toolbox` utility. \ No newline at end of file