Skip to content

Capabilities changes breaks nmap in XFCE and Docker

Re this change:

Commit b580ab1b  authored 3 months ago by Steev Klimaszewski
Add capabilities to nmap
This will allow users to run privileged scans without using sudo or
being root.

This breaks the ability to run nmap as root inside an unprivileged Docker container. It simply fails now with:

root:~# nmap -V
-bash: /usr/bin/nmap: Operation not permitted

nmap has lots of useful features even if unprivileged, so this breaks all of those scenarios.

This is also a pretty extreme change to be making a) downstream of Debian and b) between 7.94+git20230807.3be01efb1+dfsg-2+kali1 and 7.94+git20230807.3be01efb1+dfsg-2+kali2+b1.

Edited by Ewan Mellor
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information