https://community.ipfire.org/t/ping-socket-operation-not-permitted-after-upgrade-to-157-on-normal-user/5741/4 This was my fault, again. :-/
https://patchwork.ipfire.org/project/ipfire/patch/20210709161742.4224-1-michael.tremer@ipfire.org/
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=37ef9fe4e07a97d3597b9d9e7895652fcfe79150 ping still needs to be shipped...
ping is shipped with Core Update 158, so this bug is fixed there. https://blog.ipfire.org/post/ipfire-2-25-core-update-158-released