From b9d0d6bb4cddbafe15b28bbe841bd9a5e3a237e4 Mon Sep 17 00:00:00 2001
From: John Southworth <john.southworth@vyatta.com>
Date: Thu, 20 Oct 2011 16:34:41 -0500
Subject: Bugfix 7575 allow tshark to run as unprivileged user, tshark uses
 dumpcap as the packet interface so dumpcap needs cap_net_raw and
 cap_net_admin

---
 sysconf/filecaps | 1 +
 1 file changed, 1 insertion(+)

(limited to 'sysconf')

diff --git a/sysconf/filecaps b/sysconf/filecaps
index 904b0938..a3471d98 100644
--- a/sysconf/filecaps
+++ b/sysconf/filecaps
@@ -14,6 +14,7 @@ cap_net_admin=pe	/usr/sbin/brctl
 # Raw sockets
 cap_net_raw=pe	/usr/bin/tshark
 cap_net_raw=pe	/usr/sbin/tcpdump
+cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
 
 # Allow changes to system settings
 cap_net_admin,cap_sys_admin=pe /sbin/sysctl
-- 
cgit v1.2.3