diff options
author | 2022-02-20 13:21:53 +0900 | |
---|---|---|
committer | 2022-02-20 13:21:53 +0900 | |
commit | 9a6f6e08a6c439ef0964a2cb3186d6b1011316d7 (patch) | |
tree | 0ff2610afa6adb1cfb5340a596834d7ee5e0c5f2 /etc | |
parent | Merge pull request #4948 from crocket/master (diff) | |
download | firejail-9a6f6e08a6c439ef0964a2cb3186d6b1011316d7.tar.gz firejail-9a6f6e08a6c439ef0964a2cb3186d6b1011316d7.tar.zst firejail-9a6f6e08a6c439ef0964a2cb3186d6b1011316d7.zip |
wireshark.profile: Add dac_read_search to caps.keep
On gentoo linux, /usr/bin/dumpcap requires dac_read_search
instead of dac_override.
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-m-z/wireshark.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-m-z/wireshark.profile b/etc/profile-m-z/wireshark.profile index 8806695f6..c336efb86 100644 --- a/etc/profile-m-z/wireshark.profile +++ b/etc/profile-m-z/wireshark.profile | |||
@@ -26,7 +26,7 @@ include whitelist-var-common.inc | |||
26 | 26 | ||
27 | apparmor | 27 | apparmor |
28 | # caps.drop all | 28 | # caps.drop all |
29 | caps.keep dac_override,net_admin,net_raw | 29 | caps.keep dac_override,dac_read_search,net_admin,net_raw |
30 | netfilter | 30 | netfilter |
31 | no3d | 31 | no3d |
32 | # nogroups - breaks network traffic capture for unprivileged users | 32 | # nogroups - breaks network traffic capture for unprivileged users |