Messages in this thread Patch in this message |  | | Date | Wed, 18 May 2011 21:49:59 +0400 | From | Vasiliy Kulikov <> | Subject | [PATCH] docs: describe /proc/sys/net/ipv4/ping_group_range |
| |
Copied the patch description from c319b4d76b9e with minor formatting changes.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com> --- Documentation/networking/ip-sysctl.txt | 17 +++++++++++++++++ 1 files changed, 17 insertions(+), 0 deletions(-)
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt index d3d653a..3e119d9 100644 --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt @@ -717,6 +717,23 @@ icmp_errors_use_inbound_ifaddr - BOOLEAN Default: 0 +ping_group_range - vector of 2 INTEGERs: min, max + Specify the group range allowed to create non-raw icmp sockets. + + Possible applications: + + 1 0 (default) - nobody (not even root) may create ping sockets. + + 100 100 - grant permissions to the single group to either make + /sbin/ping sgid'ed and owned by this group or to grant permissions + to the "netadmins" group. + + 0 4294967295 - enable it for the world. + + 100 4294967295 - enable it for the users, but not daemons. + + Default: 1 0 + igmp_max_memberships - INTEGER Change the maximum number of multicast groups we can subscribe to. Default: 20 -- 1.7.0.4
|  |