Merge pull request #85463 from AkihiroSuda/allow-net-ipv4-ping_group_range

SafeSysctlWhitelist: add net.ipv4.ping_group_range (allow ping without CAP_NET_RAW)
2025-07-30 15:05:27 +00:00 · 2019-12-10 16:05:06 -08:00 · 2019-12-10 16:05:06 -08:00 · 4000732bec
commit 4000732bec
parent 7933002ba2 821362bd1e
1 changed files with 1 additions and 0 deletions
--- a/pkg/security/podsecuritypolicy/sysctl/mustmatchpatterns.go
+++ b/pkg/security/podsecuritypolicy/sysctl/mustmatchpatterns.go
@ -34,6 +34,7 @@ func SafeSysctlWhitelist() []string {
 		"kernel.shm_rmid_forced",
 		"net.ipv4.ip_local_port_range",
 		"net.ipv4.tcp_syncookies",
+		"net.ipv4.ping_group_range",
 	}
 }