Wireshark · Ethereal-dev: Re: [Ethereal-dev] Priv sep in ethereal

[Jaime Fournier <ober@xxxxxxxxxx>]

Maybe a silly question but
isn't the fact we drop, or atleast we use to drop
the credentials of root after the capture device was opened.
I had submitted a patch to allow it to actually change it's
effective uid to nobody.

Seems to me to resolve the issue.
But again I could be off here.

On Tue, 8 Feb 2005, Lars Roland wrote:

> Date: Tue, 08 Feb 2005 03:42:26 +0100
> From: Lars Roland <lars.roland@xxxxxxx>
> Reply-To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
> To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
> Subject: Re: [Ethereal-dev] Priv sep in ethereal
>
> Mark Pizzolato schrieb:
> (snip)
>
> > The ethereal windows installer could probably be offer an option to enable 
> > the starting of NPF at system startup.  This would completely solve 
> > privilege separation for Windows and avoid the overhead of attempting to do 
> > these things in a separate process and pass all data to a display process.
> I've checked in a change to the installer. The option to start the NPF at 
> system startup is disabled by default. Should it be enabled by default?
>
> Regards,
> Lars
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev