Package: tshark
Version: 0.99.4-5.etch.1
Severity: normal
Hi, looks like tshark drops too many capabilities when run as root:
$ touch pcap
$ sudo bash
# tshark -w pcap
tshark: The file to which the capture would be saved ("pcap") could not
be opened: Permission denied.
# ls -l pcap
-rw-rw-r-- 1 wferi wferi 0 2007-11-28 11:54 pcap
sudo stayed in my home directory. If I touch the file after sudo (as
root) the program can write into it. Maybe it's by design, but it took
me quite some time to find the capset() call in the strace, which I can
at least blame for this behaviour. Or maybe I'm wrong.
Thanks,
Feri.
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable'), (50, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.22-2-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
