It's because of linux capabilities specificly CAP_NET_RAW How to check: $ getcap $(which ping) /usr/bin/ping = cap_net_raw+ep More about it on [1] h

It's because of linux capabilities specificly CAP_NET_RAW How to check: $ getcap $(which ping) /usr/bin/ping = cap_net_raw+ep More about it on [1] https://blog.container-solutions.com/linux-capabilities-in-practice https://blog.container-solutions.com/linux-capabilities-in-p...