File 0017-squid-pinger-owner-fix-CVE-2019-3688.patch of Package permissions.13185
Index: permissions.easy
===================================================================
--- permissions.easy.orig
+++ permissions.easy
@@ -79,7 +79,7 @@
# squid changes from bnc#891268
/var/cache/squid/ squid:root 0750
/var/log/squid/ squid:root 0750
-/usr/sbin/pinger squid:root 0750
+/usr/sbin/pinger root:squid 0750
+capabilities cap_net_raw=ep
/usr/sbin/basic_pam_auth root:shadow 2750
Index: permissions.paranoid
===================================================================
--- permissions.paranoid.orig
+++ permissions.paranoid
@@ -94,7 +94,7 @@
# squid changes from bnc#891268
/var/cache/squid squid:root 0750
/var/log/squid squid:root 0750
-/usr/sbin/pinger squid:root 0750
+/usr/sbin/pinger root:squid 0750
/usr/sbin/basic_pam_auth root:shadow 0750
Index: permissions.secure
===================================================================
--- permissions.secure.orig
+++ permissions.secure
@@ -117,7 +117,7 @@
# squid changes from bnc#891268
/var/cache/squid/ squid:root 0750
/var/log/squid/ squid:root 0750
-/usr/sbin/pinger squid:root 0750
+/usr/sbin/pinger root:squid 0750
+capabilities cap_net_raw=ep
/usr/sbin/basic_pam_auth root:shadow 2750