I've emerged wireshark, and made myself a member of both the wireshark
group, and the tcpdump group, but still wireshark refuses to capture packets
if executed as a non root user. The error message is: "Couldn't run dumpcap
as a child process: Permission denied."

A little research indicated that dumpcap should be installed suid root and
It appears that it is, but I still can't execute it as a non-root user:


[ 23:16:38 ] Wed Apr 30 /usr/bin $ : ./dumpcap
bash: ./dumpcap: Permission denied
[ 09:29:50 ] Thu May 01 /usr/bin $ : ls /usr/bin/dump*
52 -r-sr-s--- 1 root wireshark 50876 Apr 27 15:49 /usr/bin/dumpcap
[ 09:29:52 ] Wed Apr 30 /usr/bin $ : su
Password:
[ 09:29:55 ] Thu May 01 /usr/bin $ : ./dumpcap
File: /tmp/etherXXXXJ8STmt
Packets: 7 Packets dropped: 0
[ 09:32:15 ] Thu May 01 /usr/bin $ : chown root:root ./dumpcap
[ 09:32:19 ] Thu May 01 /usr/bin $ : chmod g+s ./dumpcap
[ 09:32:29 ] Thu May 01 /usr/bin $ : chmod u+s ./dumpcap
[ 09:32:38 ] Thu May 01 /usr/bin $ : ls /usr/bin/dump*
52 -r-sr-s--- 1 root root 50876 Apr 27 15:49 /usr/bin/dumpcap
[ 09:32:47 ] Thu May 01 /usr/bin $ : exit
exit
[ 09:33:01 ] Thu May 01 /usr/bin $ : whoami
Cyor
[ 09:33:06 ] Thu May 01 /usr/bin $ : ./dumpcap
bash: ./dumpcap: Permission denied
[ 09:33:10 ] Thu May 01 /usr/bin $ :

I'm sure it's probably something simple that I'm unaware of or not seeing
for some reason. Can anybody point out what I'm doing wrong.

Thanks,
Bob Young
San Jose, CA.

--
gentoo-user@lists.gentoo.org mailing list