For completeness. This has been fixed in:

https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=37ef9fe4e07a97d3597b9d9e7895652fcfe79150

The capabilities where set correctly, but strip removed them later and so nothing landed in the ISO or updater.

Best,
-Michael

> On 7 Jul 2021, at 19:26, Peter Müller <peter.mueller(a)ipfire.org> wrote:
> 
> Hello *,
> 
> while working on bug #12652, I noticed we _did_ ship ping / iputils in Core Update 157. However,
> it seems as the capabilities set to /usr/bin/ping are not preserved that way.
> 
> Am I mistaken? Can we even use file capabilities in this environment?
> 
> Thanks, and best regards,
> Peter Müller