I have added the updates to create/use user _ethereal.
Also I have made use of much stricter priv dropping.
It now does all 3 states of uid/gid -> _ethereal.
You will need to chown _ethereal /usr/local/var/_ethereal for now
as the package is not setting it right.

Also once you capture, the process can not "recapture".
You will get permission denied on /dev/bpf[0-9]
For now this is a side effect of not having a true privsep, and instead
merely drops all privs once the capture device is opened.

Please let me know how it works.

-Ober

On Sat, 31 Dec 2005, Oliver J. Morais wrote:

* ober <[EMAIL PROTECTED]> [051230 01:52]:
Let me know how it works.
http://www.linbsd.org/ethereal.tgz

Works great, thank you :-)
Running on OpenBSD 3.8-current (GENERIC) #529: Thu Dec 29 13:39:24 MST 2005
on i386 (Tinkpad X30)

One thing I'd suggest: Don't use user "nobody", instead create a
special user, e.g. "_ethereal".

regards,
oliver

Reply via email to