Public bug reported:
tcp dump comes with a apparmor file
/etc/apparmor.d/usr.sbin.tcpdump
that tells to can write .pcap files:
# for -r, -F and -w
/**.[pP][cC][aA][pP] rw,
but using the -W and -C modes it will also write pcap0 etc. files
we've put apparmor in complain mode as a workaround
------
lsb_release -rd
version: 4.9.0-1ubuntu1~ubuntu12.04.1
Description: Ubuntu 12.04.4 LTS
Release: 12.04
------
apt-cache policy tcpdump
tcpdump:
Installed: 4.9.0-1ubuntu1~ubuntu12.04.1
Candidate: 4.9.0-1ubuntu1~ubuntu12.04.1
Version table:
*** 4.9.0-1ubuntu1~ubuntu12.04.1 0
500 http://nl.archive.ubuntu.com/ubuntu/ precise-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64
Packages
100 /var/lib/dpkg/status
4.5.1-2ubuntu1~ubuntu12.04.1 0
100 http://nl.archive.ubuntu.com/ubuntu/ precise-backports/main amd64
Packages
4.2.1-1ubuntu2 0
500 http://nl.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
** Affects: tcpdump (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1677129
Title:
Apparmor config does not allow pcap cyclic buffer
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tcpdump/+bug/1677129/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs