Doug, all you really need is the /etc/apparmor.d/usr.sbin.tcpdump from
the Oneiric package. It should work fine in earlier releases.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/722856
Title:
appar
On Ubuntu forums I found a link to Oneiric Ocelot Alpha 2 (server). So I
tired it as a virtual machine. It had the above mentioned revised
tcpdump package. As expected, the issues of this problem report all
worked fine. Thanks again.
--
You received this bug notification because you are a member
Thank you for the fix for this. I would very much like to try it,
however from observing the package dependencies it seems that I can not
(fix depends on libssl1.0.0 and Ubuntu 10.10 has libssl0.9.8m-1). As I
have for many months now, I will continue to run with apparmor for
tcpdump disabled, and c
This bug was fixed in the package tcpdump - 4.1.1-2ubuntu2
---
tcpdump (4.1.1-2ubuntu2) oneiric; urgency=low
* debian/usr.sbin.tcpdump:
- allow gzip and bzip2 (LP: #722856)
- allow read and write to .pcap files
- allow read of /var/log/snort/*log* files
* debian/patche
** Changed in: tcpdump (Ubuntu)
Status: Confirmed => In Progress
** Changed in: tcpdump (Ubuntu)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.
I was caught by this during a long capture and eventually ran out of
space :(
I think the default profile should authorize the invocation of common
compression tools (gzip, bzip2). If someone needs a special post
processing script/binary they should customize
/etc/apparmor.d/local/usr.sbin.tcpdump
Clarification: I don't necessarily expect to be able to have apparmor
allow me to run a script from my own directory without my editing the
local profile. However, and there is an example buried in the audit log,
I do expect it to allow me to run gzip from the default configuration.
The commands I
** Attachment added: "out from "sudo apparmor_status"
https://bugs.launchpad.net/ubuntu/+source/tcpdump/+bug/722856/+attachment/1864582/+files/status
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/7
** Attachment added: "the audit log (I try to add others later, as I only seem
to be able to add 1 now)"
https://bugs.launchpad.net/bugs/722856/+attachment/1864581/+files/audit.log
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
ht
