Wireshark-bugs: [Wireshark-bugs] [Bug 4293] When wireshark 1.2.2 is installed, the menu entry do

Date: Fri, 4 Dec 2009 09:36:08 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4293

Gerald Combs <gerald@xxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gerald@xxxxxxxxxxxxx

--- Comment #5 from Gerald Combs <gerald@xxxxxxxxxxxxx> 2009-12-04 09:36:07 PST ---
(In reply to comment #4)
> (In reply to comment #3)
> > Eh, no. setuid root takes care of that. 
> > See also http://brainstorm.ubuntu.com/idea/14140/
> 
> I read the link you had given.
> I tried running dumpcap as root, and then viewing the file which it saves the
> capture in through wireshark. It says 'you do not have permissions to read the
> file'. This is obvious as the file is created by a privileged user, and an
> unprivileged user cannot view it. I tried "sudo chgrp root /usr/bin/dumpcap",
> then ran dumpcap and then wireshark to view the file. But it gives the same
> 'permission denied' message.

It sounds like you're not setting dumpcap's permissions correctly. You should
do something like the following:

# chown root /path/to/dumpcap
# chgrp capture /path/to/dumpcap
# chmod 4750 /path/to/dumpcap

"/path/to/dumpcap" should be replaced with the full filesystem path to dumpcap.
"capture" is a group that you're a member of. It could be "admin", "wheel", or
any other group just as long as you're a member. "ls -l dumpcap" should look
something like this:

rwsr-x---   1 root  capture  145228 Dec  3 17:15 dumpcap

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.