wireshark: restrict capturing to root and members of the wireshark group.

Permissions on dumpcap were too permissive.
This commit is contained in:
Christopher Brannon 2015-08-19 06:32:17 -07:00
parent d5db98526f
commit f938786f7c
2 changed files with 2 additions and 1 deletions

View File

@ -2,5 +2,6 @@ case "${ACTION}" in
post)
chgrp wireshark usr/bin/dumpcap
setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' usr/bin/dumpcap
chmod 770 usr/bin/dumpcap
;;
esac

View File

@ -1,7 +1,7 @@
# Template file for 'wireshark'
pkgname=wireshark
version=1.12.7
revision=1
revision=2
build_style=gnu-configure
configure_args="--with-ssl --with-pcap --with-libcap --with-zlib --with-lua
--with-krb5 --with-gtk3=yes --without-portaudio CC_FOR_BUILD=cc"