On Feb 5, 2019, at 2:07 PM, Peter Wu <peter@xxxxxxxxxxxxx> wrote:
> The last option would permit *users* to invoke arbitrary commands as
> root if they run Wireshark with sudo or as root user. I think that might
> not be a bad idea after all:
[existing reasons elided]
- They shouldn't be running *Wireshark* as root unless they're on a system such as Kali where everything runs as root; if they need root privileges in order to capture, they should make dumpcap set-UID root. If they're silly enough to run *Wireshark* as root when it doesn't need to run as root, my sympathies if they get pwned is limited.