Use Case
The current native method uses raw ICMP sockets, which requires the user to be root or to have CAP_NET_RAW, which can be seen as a security risk. Adding support for ICMP over SOCK_DGRAM sockets resolves this.
Expected behavior
- method = "native" + privileged = true (or unset) -> ping plugin does not work when non-root and no CAP_NET_RAW has been granted
- method = "native" + privileged = false -> ping plugin works when non-root and without any capabilities, but requires user GID to fall in net.ipv4.ping_group_range
Actual behavior
method = "native" does not work on non-root no-capabilities environments
Additional info
No response
Use Case
The current native method uses raw ICMP sockets, which requires the user to be root or to have CAP_NET_RAW, which can be seen as a security risk. Adding support for ICMP over SOCK_DGRAM sockets resolves this.
Expected behavior
Actual behavior
method = "native" does not work on non-root no-capabilities environments
Additional info
No response