Right, this is indeed about apparmor.
The apparmor profile for tcpdump grants rw access to *.pcap. You're
using a capture file named "ax0.cap", which doesn't match. I couldn't
reproduce because I was testing the same scenario with the correct
extension. I guess the simple fix would be to also
Hi,
On Thu, Jun 3, 2021 at 7:30 PM Dennis Boone wrote:
> The following session was executed as root:
>
> ozymandias 179 # tcpdump -r /tmp/ax0.cap -Z root
> tcpdump: /tmp/ax0.cap: Permission denied
> ozymandias 180 # tcpdump -r /tmp/ax0.cap -Z tcpdump
> tcpdump:
Package: tcpdump
Version: 4.99.0-2
Severity: normal
X-Debbugs-Cc: d...@msu.edu
According to the manpage, if run as root, tcpdump switches to the
tcpdump user. It's supposed to be possible to override this behavior
by using the "-Z root" command line option.
The following session was executed as
3 matches
Mail list logo
