wireshark: do not set DAC_OVERRIDE, remove that

This commit is contained in:
Danny Rawlins 2020-05-24 23:21:25 +10:00
parent 45c211f495
commit 928916a487

View File

@ -18,5 +18,4 @@ getent group wireshark >/dev/null || groupadd -r wireshark
chgrp wireshark /usr/bin/dumpcap
chmod 754 /usr/bin/dumpcap
#/sbin/setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap
/sbin/setcap cap_net_raw,cap_net_admin,cap_dac_override+eip /usr/bin/dumpcap
/sbin/setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap