[Mageia-dev] [changelog] [RPM] cauldron core/release wireshark-1.8.4-2.mga3

[Olivier Blin]

wally <buildsystem-daemon at mageia.org> writes:

> Name        : wireshark                    Relocations: (not relocatable)
> Version     : 1.8.4                             Vendor: Mageia.Org
> Release     : 2.mga3                        Build Date: Sat Dec  1 17:48:14 2012
> Install Date: (not installed)               Build Host: jonund.mageia.org
> Group       : Monitoring                    Source RPM: (none)
> Size        : 24192404                         License: GPLv2+ and GPLv3
> Signature   : (none)
> Packager    : wally <wally>
> URL         : http://www.wireshark.org
> Summary     : Network traffic analyzer
> Description :
> Wireshark is a network traffic analyzer for Unix-ish operating systems. It is
> based on GTK+, a graphical user interface library, and libpcap, a packet
> capture and filtering library.
>
> wally <wally> 1.8.4-2.mga3:
> + Revision: 324195
> - install dumpcap setuid root as upstream suggests (to allow to start wireshark as normal user)
> - drop run-as-root hacks

Hi,

It seems you introduced a security flaw: now all users are able to
capture the network traffic.

This should be reverted, or restrictions should be added (maybe by
making consolekit add acls if possible).

-- 
Olivier Blin - blino