From f05520099cf12009799997ea35637f8c7f3818ce Mon Sep 17 00:00:00 2001 From: Gerald Combs Date: Wed, 7 Apr 2010 17:13:28 +0000 Subject: Add a setuid example. svn path=/trunk/; revision=32418 --- doc/README.packaging | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/doc/README.packaging b/doc/README.packaging index 15c500adf9..b3f42e1a40 100644 --- a/doc/README.packaging +++ b/doc/README.packaging @@ -59,14 +59,21 @@ capabilities library (on which it depends) is found. Warnings are displayed when Wireshark and TShark are run as root. -For systems that have libcap and the "setcap" utility you can avoid -root altogether: +For Linux systems that have libcap and the "setcap" utility you can +avoid root altogether: # groupadd -g packetcapture # chmod 750 /usr/bin/dumpcap # chgrp packetcapture /usr/bin/dumpcap # setcap cap_net_raw,cap_net_admin+eip /usr/bin/dumpcap +For Linux systems without filesystem capabilities you can limit root +to dumpcap: + +# groupadd -g packetcapture +# chgrp packetcapture /usr/bin/dumpcap +# chmod 4750 /usr/bin/dumpcap + 4. Customization. Custom version information can be added by creating a file called @@ -81,7 +88,8 @@ defined as a string. If you need a numeric definition, let us know. 5. Trademarks. -Wireshark and the "fin" logo are registered trademarks of Gerald Combs. +Wireshark and the "fin" logo are registered trademarks of the Wireshark +Foundation. 6. Spelling. -- cgit v1.2.3