path: root/doc/README.packaging
diff options
authorGerald Combs <gerald@wireshark.org>2008-02-27 01:22:51 +0000
committerGerald Combs <gerald@wireshark.org>2008-02-27 01:22:51 +0000
commitb202480fd8a155fe8f344765c0f80ffe5c1ef70a (patch)
treeb1cfe1490a80cabe8acdba32b46d277c1df86cec /doc/README.packaging
parenta2b19b3603f1cb955f9fd37d31c849fa7599997d (diff)
Expand the setuid text a bit.
svn path=/trunk/; revision=24485
Diffstat (limited to 'doc/README.packaging')
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/README.packaging b/doc/README.packaging
index 7b43e1da26..400b36e6cd 100644
--- a/doc/README.packaging
+++ b/doc/README.packaging
@@ -46,7 +46,10 @@ interfaces: "--enable-setuid-install" and "--with-libcap". Setting
"--enable-setuid-install" to "yes" will install dumpcap setuid root.
This is necessary for non-root users to be able to capture on most
systems, e.g. on Linux or FreeBSD if the user doesn't have permissions
-to access /dev/bpf*. It is disabled by default.
+to access /dev/bpf*. It is disabled by default. Note that enabling this
+allows packet capture for ALL users on your system. If this is not
+desired, you should restrict dumpcap execution to a specific group or
If the "--with-libcap" option is enabled, dumpcap will try to drop any
setuid privileges it may have while retaining the CAP_NET_ADMIN and