Re: Using capabilities for libpcap apps

2010-04-09 Thread Serge E. Hallyn
Quoting Radek Vokál (radekvo...@gmail.com): > On 04/08/2010 10:49 PM, Steve Grubb wrote: > > On Tuesday 06 April 2010 04:47:22 pm Radek Vokál wrote: > >>I need few suggestions about this .. > >> https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > >> Combs, the upstream main

Re: Using capabilities for libpcap apps

2010-04-09 Thread Radek Vokál
On 04/08/2010 10:49 PM, Steve Grubb wrote: > On Tuesday 06 April 2010 04:47:22 pm Radek Vokál wrote: >>I need few suggestions about this .. >> https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald >> Combs, the upstream maintainer of wireshark, suggests to use >> capabilities i

Re: Using capabilities for libpcap apps

2010-04-08 Thread Steve Grubb
On Tuesday 06 April 2010 04:47:22 pm Radek Vokál wrote: > I need few suggestions about this .. > https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > Combs, the upstream maintainer of wireshark, suggests to use > capabilities instead of consolehelper+root privileges for > dump

Re: Using capabilities for libpcap apps

2010-04-07 Thread Colin Walters
2010/4/6 Radek Vokál : > Hi all, > >  I need few suggestions about this .. > https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > Combs, the upstream maintainer of wireshark, suggests to use > capabilities instead of consolehelper+root privileges for > dumpcap/wireshark. Using

Re: Using capabilities for libpcap apps

2010-04-07 Thread Serge E. Hallyn
Quoting Miroslav Lichvar (mlich...@redhat.com): > On Tue, Apr 06, 2010 at 10:47:22PM +0200, Radek Vokál wrote: > > Hi all, > > > > I need few suggestions about this .. > > https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > > Combs, the upstream maintainer of wireshark, su

Re: Using capabilities for libpcap apps

2010-04-07 Thread Miroslav Lichvar
On Tue, Apr 06, 2010 at 10:47:22PM +0200, Radek Vokál wrote: > Hi all, > > I need few suggestions about this .. > https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > Combs, the upstream maintainer of wireshark, suggests to use > capabilities instead of consolehelper+root

Re: Using capabilities for libpcap apps

2010-04-06 Thread Huzaifa Sidhpurwala
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Huzaifa Sidhpurwala wrote: Ah Sorry, scratch the last line please, an oversight :) > I would suggest using libpcap-ng rather than libpcap if it works. - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) GnuPG Fingerprint: 3A0F DAFB 9279 0

Re: Using capabilities for libpcap apps

2010-04-06 Thread Huzaifa Sidhpurwala
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I was speaking about this with Rahul Sundaram and he pointed me to: http://fedoraproject.org/wiki/Features/LowerProcessCapabilities I would suggest using libpcap-ng rather than libpcap if it works. Radek Vokál wrote: > Hi all, > > I need few

Re: Using capabilities for libpcap apps

2010-04-06 Thread Dan Horák
Radek Vokál píše v Út 06. 04. 2010 v 22:47 +0200: > Hi all, > > I need few suggestions about this .. > https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald > Combs, the upstream maintainer of wireshark, suggests to use > capabilities instead of consolehelper+root privileges

Using capabilities for libpcap apps

2010-04-06 Thread Radek Vokál
Hi all, I need few suggestions about this .. https://blog.wireshark.org/2010/02/running-wireshark-as-you/ .. Gerald Combs, the upstream maintainer of wireshark, suggests to use capabilities instead of consolehelper+root privileges for dumpcap/wireshark. It makes whole lot of sense, so I've l