Wireshark-bugs: [Wireshark-bugs] [Bug 7672] dumpcap gives up write privileges too early
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 3 Sep 2012 02:09:57 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7672

--- Comment #2 from Jan Šafránek <jsafrane@xxxxxxxxxx> 2012-09-03 02:09:56 PDT ---
(In reply to comment #1)
> The normal case, where dumpcap is run by a normal user (and because of this
> either users captabilities or suid) is correct and gets broken by your patch.
> Please let me know if I read this incorrectly.

How exactly does it get broken? In the end, the wireshark process gives up all
its privileges, just a bit later than before.

The only difference I can think of is "sudo tshark -w /root/test.pcap". Current
wireshark refuses to write to /root, because it gives up its write privileges.
With my patch, the command succeeds. I think the later behavior is better, it's
expected that commands under sudo can write anywhere.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.