From b202480fd8a155fe8f344765c0f80ffe5c1ef70a Mon Sep 17 00:00:00 2001 From: Gerald Combs Date: Wed, 27 Feb 2008 01:22:51 +0000 Subject: Expand the setuid text a bit. svn path=/trunk/; revision=24485 --- doc/README.packaging | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'doc/README.packaging') diff --git a/doc/README.packaging b/doc/README.packaging index 7b43e1da26..400b36e6cd 100644 --- a/doc/README.packaging +++ b/doc/README.packaging @@ -46,7 +46,10 @@ interfaces: "--enable-setuid-install" and "--with-libcap". Setting "--enable-setuid-install" to "yes" will install dumpcap setuid root. This is necessary for non-root users to be able to capture on most systems, e.g. on Linux or FreeBSD if the user doesn't have permissions -to access /dev/bpf*. It is disabled by default. +to access /dev/bpf*. It is disabled by default. Note that enabling this +allows packet capture for ALL users on your system. If this is not +desired, you should restrict dumpcap execution to a specific group or +user. If the "--with-libcap" option is enabled, dumpcap will try to drop any setuid privileges it may have while retaining the CAP_NET_ADMIN and -- cgit v1.2.3