On Friday, 11 January 2019 4:53:26 ACDT Carlos E. R. wrote:
On 10/01/2019 17.34, Manfred Hollstein wrote:
On Thu, 10 Jan 2019, 16:51:16 +0100, Martin Wilck wrote:
On Thu, 2019-01-10 at 15:43 +0100, Carlos E. R. wrote: But, this can be easily overcome with an entry in /etc/permissions.local as follows (again, replace $GROUP with your specific choice, "wheel" in
Martin's example): /usr/bin/dumpcap root:$GROUP 0750
+capabilities cap_net_raw=ep
No more worries about any future update ;)
Thanks! I was not aware that "permisions" could also set capabilities.
Note: run "chkstat --system --set" to apply.
Excellent! My only suggested change would be: +capabilities cap_net_admin,cap_net_raw=ep as originally suggested on the Wireshark wiki. Tested and works here. :) Now, this needs to be documented in a README file in the wireshark package, and perhaps displayed after installation. It would be good to have it somewhere on the openSUSE wiki too (not sure where it belongs). It would be even better if the capabilties were set by rpm as part of the install script, but the group may vary from system to system so a default group (e.g. wheel or wireshark) may not work for everyone. I guess it is easy to add a user to an extra group, though, as long as the need to do so is well documented and brought to the users' (or admins') attention. -- ============================================================== Rodney Baker VK5ZTV rodney.baker@iinet.net.au CCNA #CSCO12880208 ==============================================================