dumpcap: Add a permissions warning about capabilities
If we have Linux capabilities, and dumpcap gets a permission error, suggest that the user add the CAP_NET_RAW and CAP_NET_ADMIN capabilities that dumpcap needs if Wireshark was not installed by a package. (Distribution packages should set the capabilities.) Fix #18279
This commit is contained in:
parent
76719d21eb
commit
7bfc3f2c13
17
dumpcap.c
17
dumpcap.c
|
@ -625,6 +625,20 @@ relinquish_all_capabilities(void)
|
||||||
/*
|
/*
|
||||||
* Platform-dependent suggestions for fixing permissions.
|
* Platform-dependent suggestions for fixing permissions.
|
||||||
*/
|
*/
|
||||||
|
|
||||||
|
#ifdef HAVE_LIBCAP
|
||||||
|
#define LIBCAP_PERMISSIONS_SUGGESTION \
|
||||||
|
"\n\n" \
|
||||||
|
"If you did not install Wireshark from a package, ensure that Dumpcap " \
|
||||||
|
"has the needed CAP_NET_RAW and CAP_NET_ADMIN capabilities by running " \
|
||||||
|
"\n\n" \
|
||||||
|
" sudo setcap cap_net_raw,cap_net_admin=ep {path/to/}dumpcap" \
|
||||||
|
"\n\n" \
|
||||||
|
"and then restarting Wireshark."
|
||||||
|
#else
|
||||||
|
#define LIBCAP_PERMISSIONS_SUGGESTION
|
||||||
|
#endif
|
||||||
|
|
||||||
#if defined(__linux__)
|
#if defined(__linux__)
|
||||||
#define PLATFORM_PERMISSIONS_SUGGESTION \
|
#define PLATFORM_PERMISSIONS_SUGGESTION \
|
||||||
"\n\n" \
|
"\n\n" \
|
||||||
|
@ -641,7 +655,8 @@ relinquish_all_capabilities(void)
|
||||||
"\n\n" \
|
"\n\n" \
|
||||||
" sudo usermod -a -G wireshark {your username}" \
|
" sudo usermod -a -G wireshark {your username}" \
|
||||||
"\n\n" \
|
"\n\n" \
|
||||||
"and then logging out and logging back in again."
|
"and then logging out and logging back in again." \
|
||||||
|
LIBCAP_PERMISSIONS_SUGGESTION
|
||||||
#elif defined(__APPLE__)
|
#elif defined(__APPLE__)
|
||||||
#define PLATFORM_PERMISSIONS_SUGGESTION \
|
#define PLATFORM_PERMISSIONS_SUGGESTION \
|
||||||
"\n\n" \
|
"\n\n" \
|
||||||
|
|
Loading…
Reference in New Issue