Capabilities changes breaks nmap in XFCE and Docker
Re this change:
Commit b580ab1b authored 3 months ago by Steev Klimaszewski
Add capabilities to nmap
This will allow users to run privileged scans without using sudo or
being root.
This breaks the ability to run nmap as root inside an unprivileged Docker container. It simply fails now with:
root:~# nmap -V
-bash: /usr/bin/nmap: Operation not permitted
nmap has lots of useful features even if unprivileged, so this breaks all of those scenarios.
This is also a pretty extreme change to be making a) downstream of Debian and b) between 7.94+git20230807.3be01efb1+dfsg-2+kali1
and 7.94+git20230807.3be01efb1+dfsg-2+kali2+b1
.
Edited by Ewan Mellor