From b9d0d6bb4cddbafe15b28bbe841bd9a5e3a237e4 Mon Sep 17 00:00:00 2001 From: John Southworth <john.southworth@vyatta.com> Date: Thu, 20 Oct 2011 16:34:41 -0500 Subject: Bugfix 7575 allow tshark to run as unprivileged user, tshark uses dumpcap as the packet interface so dumpcap needs cap_net_raw and cap_net_admin --- sysconf/filecaps | 1 + 1 file changed, 1 insertion(+) (limited to 'sysconf') diff --git a/sysconf/filecaps b/sysconf/filecaps index 904b0938..a3471d98 100644 --- a/sysconf/filecaps +++ b/sysconf/filecaps @@ -14,6 +14,7 @@ cap_net_admin=pe /usr/sbin/brctl # Raw sockets cap_net_raw=pe /usr/bin/tshark cap_net_raw=pe /usr/sbin/tcpdump +cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap # Allow changes to system settings cap_net_admin,cap_sys_admin=pe /sbin/sysctl -- cgit v1.2.3