nixpkgs/pkgs
Bjørn Forsman a70197a653 wireshark: add patch to lookup "dumpcap" in PATH
What this allows us to do is define a "dumpcap" setuid wrapper in NixOS
and have wireshark use that instead of the non-setuid dumpcap binary
that it normally uses.

As far as I can tell, the code that is changed to do lookup in PATH is
only used by wireshark/tshark to find dumpcap. dumpcap, the thing that's
typically setuid, is not affected by this patch. wireshark and tshark
should *not* be installed setuid, so the fact that they now do lookup in
PATH is not a security concern.

With this commit, and the following config, only "root" and users in the
"wireshark" group will have access to capturing network traffic with
wireshark/dumpcap:

  environment.systemPackages = [ pkgs.wireshark ];
  security.setuidOwners = [
    { program = "dumpcap";
      owner = "root";
      group = "wireshark";
      setuid = true;
      setgid = false;
      permissions = "u+rx,g+x";
    }
  ];
  users.extraGroups.wireshark.gid = 500;

(This wouldn't have worked before, because then wireshark would not use
our setuid dumpcap binary.)
2014-04-22 21:33:11 +02:00
..
applications wireshark: add patch to lookup "dumpcap" in PATH 2014-04-22 21:33:11 +02:00
build-support Merge pull request #1928 from 'cross-win-osx'. 2014-04-21 10:00:35 +02:00
data Merge pull request #1928 from 'cross-win-osx'. 2014-04-21 10:00:35 +02:00
desktops Remove KDE 4.11 2014-04-21 18:13:17 +02:00
development dbus: Merge tools and daemon 2014-04-22 17:38:53 +02:00
games Move su to the base packages of chrootenv builder 2014-04-18 13:30:24 +02:00
misc vim-plugins: update and upgrade 2014-04-21 19:21:18 +02:00
os-specific rtkit: Update from 0.10 to 0.11 2014-04-21 23:22:10 +02:00
servers pulseaudio: Update from 4.0 to 5.0 2014-04-21 23:22:10 +02:00
shells ipython: update 1.1.0 -> 2.0.0 2014-04-13 21:55:27 +02:00
stdenv Typo/comment 2014-04-22 18:42:44 +02:00
test
tools dd-agent: update from 4.2.0 to 4.2.1 2014-04-22 15:47:06 +02:00
top-level perl-dbix-class: Fix tests with newer SQLite. 2014-04-22 16:27:28 +02:00