Ping and traceroute really shouldn’t need setuid on Linux anymore. tracepath uses an option to set the TTL and works without setuid (although options like TCP

Ping and traceroute really shouldn’t need setuid on Linux anymore. tracepath uses an option to set the TTL and works without setuid (although options like TCP tracerouting aren’t possible with that, but as mentioned that can use CAP_NET_RAW). ping can also use a similar API to run fine unprivileged (fairly sure Fedora uses that already to have a non-setuid ping).