When users try to execute ping they get a message saying that the socket
can't be opened :permission denied.

Where is this configured? 

Anyone have any good suggestions for guidlines for setting up permissions?
Books?

In other words, what's the best way to grant as little permission to users
as possible while still allowing them to use tools, etc. ?

Thanks,

Joe Laffey
LAFFEY Computer Imaging