[Bug 483106] Re: cannot perform packet captures as a regular user
*** This bug is a duplicate of bug 513903 *** https://bugs.launchpad.net/bugs/513903 ** This bug has been marked a duplicate of bug 513903 Must be run as root, which is not secure -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
It would be sweet to have this for Lucid. -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
Copying README.Debian [0] here: Capturing packets with Wireshark/Tshark There are two ways of installing Wireshark/Tshark on Debian: I. Installing dumpcap with SETUID bit set Members of group wireshark will be able to capture packets on network interfaces. This is the preferred way of installation if Wireshark/Tshark will be used for capturing and displaying packets at the same time, since that way only the dumpcap process has to be run with root privileges thanks to the privilege separation[1]. Note that no user will be added to group wireshark automatically, the system administrator has to add them manually. II. Installing dumpcap without SETUID bit set Only root user will be able to capture packets. It is advised to capture packets with the bundled dumpcap program as root and then run Wireshark/Tshark as an ordinary user to analyze the captured logs. [2] The installation method can be changed anytime by running: dpkg-reconfigure wireshark-common [1] http://wiki.wireshark.org/Development/PrivilegeSeparation [2] http://wiki.wireshark.org/CaptureSetup/CapturePrivileges [0] http://svn.debian.org/wsvn/collab-maint/ext- maint/wireshark/trunk/debian/README.Debian -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
This issue, as well as its fix, has been in Brainstorm for over a year. It's a simple, security-minded fix. To quote from there... Wireshark's developers strongly recommend against running as root. As of 9.10, Wireshark installs to menu with no root option, making it useless. Installing the small dumpcap binary from wireshark-common suid root allows users to run wireshark itself, with all its complexety, as unprivileged users, thus possibly enhancing security. sudo chgrp GROUPNAME /usr/bin/dumpcap sudo chmod 4750 /usr/bin/dumpcap http://brainstorm.ubuntu.com/idea/14140/ I have set the group on my machine to admin, but a new wireshark group makes sense, too. -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
** Changed in: wireshark (Debian) Status: Unknown = Won't Fix -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
** Also affects: wireshark (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544482 Importance: Unknown Status: Unknown -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 483106] Re: cannot perform packet captures as a regular user
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544482 ** Bug watch added: Debian Bug tracker #544482 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544482 -- cannot perform packet captures as a regular user https://bugs.launchpad.net/bugs/483106 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
