>How is that an improvement over just giving the ping binary on disk that capability? That would be okay too, but not all suid usages can be replaced like that

>How is that an improvement over just giving the ping binary on disk that capability? That would be okay too, but not all suid usages can be replaced like that. >And how would "su" and "sudo" work in your model? They wouldn't exist in my model.