Hi all, I need few suggestions about this .. https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald Combs, the upstream maintainer of wireshark, suggests to use capabilities instead of consolehelper+root privileges for dumpcap/wireshark. It makes whole lot of sense, so I've looked if other apps in Fedora are already using it and I haven't found any. Honestly I'm not sure about right way to use them. The idea is to add something like following to %post
# groupadd -g wireshark # chgrp wireshark /usr/bin/dumpcap # setcap cap_net_raw,cap_net_admin+eip /usr/bin/dumpcap # setcap cap_net_raw,cap_net_admin+eip /usr/bin/tshark Suggestions? Ideas? Spec file patches? Any help is welcome. Radek -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel
