Linux/Non-root users can ping

Configuring non-root users to send ICMP datagrams

How does a non-root user ping another machine?

Classically, that has been to make ping setuid. After that, it had the raw
network capability so it could send without root privileges but that’s a fairly
coarse privilege - it can create any type of socket, not just ICMP.

Better to use the newest option net.ipv4.ping_group_range.

Security concerns? Fair, but consider: Fedora and Arch enable this for all
users by default.

Links

• https://github.com/ValentinBELYN/icmplib/blob/main/docs/6-use-icmplib-without-privileges.md
• https://security.stackexchange.com/questions/4440/security-risk-of-ping
• https://www.kernel.org/doc/html/latest/networking/ip-sysctl.html
• https://blog.cloudflare.com/the-day-my-ping-took-countermeasures