wrongmmmm··on Exploiting the Linux kernel via packet socketsNot true. CAP_NET_RAW is on by default: https://github.com/moby/moby/blob/master/oci/defaults_linux....Otherwise no one could ping from a container.