Support kernel parameter ping_group_range allowing unprivileged users to use ICMP (ping) #250
Description
Today SPINE is only supporting ICMP if running as root -
to verify that it has root permissions capabilities for RAW_NET (hasCaps()) as well as setuid will be taken into account.
Since kernel release 2.6.x parameter ping_group_range will be supported that allows a range of user groups to use RAW sockets for PING as unprivileged users.
Many distributions are supporting that today per default, OpenNMS is also mentioning that option.
( see [https://opennms.discourse.group/t/how-to-allow-unprivileged-users-to-use-icmp-ping/1573] )
The parameter vvalue can be reviewed at CLI level for example with:
browniebraun@browniebraun-Lenovo-ideapad-530S-14IKB:~$ /sbin/sysctl net.ipv4.ping_group_range net.ipv4.ping_group_range = 0 2147483647
If disabled net.ipv4.ping_group_range will return "1 0".
ping.c offers a function called inet_get_ping_group_range_net(), probably this could be used as an entry point for a modification of Spine.