The patch for tethereal(1) is at
http://www.linbsd.org/setuid_tethereal.patch
This only works for capture mode. It takes an extra -u option for the
user. So create user _ethereal then run
tethereal -Nn -tad -u _ethereal -w foo
or decode the output. Either way this should remove the issue of ro
> "Bruno" == Bruno Rohee <[EMAIL PROTECTED]> writes:
Bruno> Capturing traffic by some other mean then analysing it with
Bruno> Ethereal under an unprivileged account might be safe,
Bruno> actually capturing an analysing traffic with Ethereal is
Bruno> definitely not, given its
Sebastian .Rother schrieb:
Jakob Schlyter schrieb:
On Thu, 8 Sep 2005, Matt Jibson wrote:
I believe that Ethereal has improved greatly since when it was
removed from
ports.
surely, but has security improved? does it have privsep? until that
has changed, ethereal will not come back. sor
On Thu, Sep 08, 2005 at 03:10:41PM +0200, Sebastian .Rother wrote:
> >
> >surely, but has security improved? does it have privsep? until that
> >has changed, ethereal will not come back. sorry.
> >
> >jakob
>
>
> Then drop all ports!
> Has Gnome Priv-Sep? hydra? nmap? KDE? xpdf? XMMS? mplaye
Jakob Schlyter schrieb:
On Thu, 8 Sep 2005, Matt Jibson wrote:
I believe that Ethereal has improved greatly since when it was
removed from
ports.
surely, but has security improved? does it have privsep? until that
has changed, ethereal will not come back. sorry.
jakob
Then drop a
5 matches
Mail list logo
