[Bug 2047508] [NEW] Insufficient privileges and unavailability of clockdiff

[Jingzi Meng]

Public bug reported:

Description:	Ubuntu 22.04.3 LTS
Release:	22.04
Package Version: iputils-clockdiff 3:20211215-1

Expect to happen: Use clockdiff as an unprivileged user.

What happened instead: Basic functions are not available for
unprivileged users. When try to get the time difference between
localhost and a remote, clockdiff fails with an error message ”Operation
not permitted”.

clockdiff 185.125.190.21
clockdiff: nice: Operation not permitted

Problems: Clockdiff is configured with CAP_NET_RAW, but it is not
sufficient, CAP_SYS_NICE is needed as well. After add CAP_SYS_NICE as
root, the permission error is gone, but a "host is down" message is
returned. We think that might be a problem too.

clockdiff -o 39.156.66.18
clockdiff: 39.156.66.18 is down

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: iputils-clockdiff 3:20211215-1
ProcVersionSignature: Ubuntu 6.2.0-39.40~22.04.1-generic 6.2.16
Uname: Linux 6.2.0-39-generic x86_64
ApportVersion: 2.20.11-0ubuntu82.5
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Wed Dec 27 16:53:43 2023
InstallationDate: Installed on 2023-12-26 (0 days ago)
InstallationMedia: Ubuntu 22.04.3 LTS "Jammy Jellyfish" - Release amd64 (20230807.2)
RebootRequiredPkgs: Error: path contained symlinks.
SourcePackage: iputils
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: iputils (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy wayland-session

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to iputils in Ubuntu.
https://bugs.launchpad.net/bugs/2047508

Title:
  Insufficient privileges and unavailability of clockdiff

Status in iputils package in Ubuntu:
  New

Bug description:
  Description:	Ubuntu 22.04.3 LTS
  Release:	22.04
  Package Version: iputils-clockdiff 3:20211215-1

  Expect to happen: Use clockdiff as an unprivileged user.

  What happened instead: Basic functions are not available for
  unprivileged users. When try to get the time difference between
  localhost and a remote, clockdiff fails with an error message
  ”Operation not permitted”.

  clockdiff 185.125.190.21
  clockdiff: nice: Operation not permitted

  Problems: Clockdiff is configured with CAP_NET_RAW, but it is not
  sufficient, CAP_SYS_NICE is needed as well. After add CAP_SYS_NICE as
  root, the permission error is gone, but a "host is down" message is
  returned. We think that might be a problem too.

  clockdiff -o 39.156.66.18
  clockdiff: 39.156.66.18 is down

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: iputils-clockdiff 3:20211215-1
  ProcVersionSignature: Ubuntu 6.2.0-39.40~22.04.1-generic 6.2.16
  Uname: Linux 6.2.0-39-generic x86_64
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Wed Dec 27 16:53:43 2023
  InstallationDate: Installed on 2023-12-26 (0 days ago)
  InstallationMedia: Ubuntu 22.04.3 LTS "Jammy Jellyfish" - Release amd64 (20230807.2)
  RebootRequiredPkgs: Error: path contained symlinks.
  SourcePackage: iputils
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iputils/+bug/2047508/+subscriptions