Wireshark · Wireshark-dev: Re: [Wireshark-dev] [Fwd: [Wireshark-bugs] [Bug 1741] New: Privilege separation patch]

[Gerald Combs <gerald@xxxxxxxxxxxxx>]

Ulf Lamping wrote:
> Joerg Mayer schrieb:
>> On Mon, Aug 13, 2007 at 02:58:10PM -0700, Gerald Combs wrote:
>>   
>>> I've submitted a patch which implements some of the changes discussed at
>>> http://wiki.wireshark.org/Development/PrivilegeSeparation . If no one
>>> has any objections I'd like to check it in later this week.
>>>     
>> I'm afraid you lost me with this patch: 
>>
>> I understand the wireshark capture model correctly, wireshark
>> doesn't need root privileges even now because capturing can be done by
>> dumpcap, and thus wireshark should never be installed suid root. This
>> is reflected by configure.in. 
> Yes and no. While the capturing itself is already completely done in 
> dumpcap, some libpcap/winpcap stuff was still called in Wireshark itself 
> (e.g. the enumeration of capture interfaces). At least for some of the 
> Win32 specific stuff like the interface details windows this is still 
> the case AFAIR.
> 
> However, I don't know how far Geralds changes are going (didn't had a 
> look myself at it), maybe he fixed even that somehow.

The interface details code is still called directly from Wireshark.  I
was thinking of adding an option to dumpcap to print out the details as
a list of colon-separated fields, and simply reprint them in the details
window.  This would let us add detail fields to dumpcap at any time
without having to update the GTK code.  What do you think?