[Bug 19029] New: ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

Summary: ICMP ping requires application to run as root
           Product: Wine
           Version: 1.1.19
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: minor
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

"WARNING: Trying to use ICMP (network ping) will fail unless running as root"

This message was raised by a legitimate application trying to reach a network
license server.

I'm guessing this was a design decision to limit windows DoS malware to use
wine as a platform.

Since users are told to never ever ever run wine as root, this message is quite
confusing.

[Bug 19029] ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

--- Comment #1 from Ken Sharp   2009-06-22 11:36:57 ---
$man ping

"SECURITY
       ping requires CAP_NET_RAWIO capability to be executed. It may be used as
set-uid root."

[Bug 19029] ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |INVALID

--- Comment #2 from Dmitry Timoshkov   2009-06-22 11:59:31 ---
This is a Linux kernel limitation not a Wine one.

[Bug 19029] ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Dmitry Timoshkov   2009-06-22 11:59:46 ---
Closing invalid.

[Bug 19029] ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

SiDi  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #4 from SiDi   2010-02-16 07:11:48 ---
I think a solution could be to set the correct capability in the binary that
does the ping itself, which could be done in Wine's Makefile (unless the app
Daniel K. Attling uses is trying to send the ping packet on it's own, in which
case there is nothing to do to workaround this bug).

[Bug 19029] ICMP ping requires application to run as root

http://bugs.winehq.org/show_bug.cgi?id=19029

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #5 from [e-mail]  2010-08-04 06:45:18 ---
No matter if it's a bug or a linux kernel security limitation. There must be a
proper solution!

I would need it for eMule's UploadSpeedSense feature... :(((