From f938786f7ccdbd855a5f2b8645979a65b6954558 Mon Sep 17 00:00:00 2001 From: Christopher Brannon Date: Wed, 19 Aug 2015 06:32:17 -0700 Subject: [PATCH] wireshark: restrict capturing to root and members of the wireshark group. Permissions on dumpcap were too permissive. --- srcpkgs/wireshark/INSTALL | 1 + srcpkgs/wireshark/template | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/srcpkgs/wireshark/INSTALL b/srcpkgs/wireshark/INSTALL index 9c5f29d4b09..07811112ea6 100644 --- a/srcpkgs/wireshark/INSTALL +++ b/srcpkgs/wireshark/INSTALL @@ -2,5 +2,6 @@ case "${ACTION}" in post) chgrp wireshark usr/bin/dumpcap setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' usr/bin/dumpcap + chmod 770 usr/bin/dumpcap ;; esac diff --git a/srcpkgs/wireshark/template b/srcpkgs/wireshark/template index cd8a7962f26..907d70eb2a1 100644 --- a/srcpkgs/wireshark/template +++ b/srcpkgs/wireshark/template @@ -1,7 +1,7 @@ # Template file for 'wireshark' pkgname=wireshark version=1.12.7 -revision=1 +revision=2 build_style=gnu-configure configure_args="--with-ssl --with-pcap --with-libcap --with-zlib --with-lua --with-krb5 --with-gtk3=yes --without-portaudio CC_FOR_BUILD=cc"