[gentoo-user] Wireshark won't run except as root

[Bob Young]

I've emerged wireshark, and made myself a member of both the wireshark
group, and the tcpdump group, but still wireshark refuses to capture packets
if executed as a non root user. The error message is: "Couldn't run dumpcap
as a child process: Permission denied." 

A little research indicated that dumpcap should be installed suid root and
It appears that it is, but I still can't execute it as a non-root user:


[ 23:16:38 ]  Wed Apr 30  /usr/bin $ : ./dumpcap
bash: ./dumpcap: Permission denied
[ 09:29:50 ]  Thu May 01  /usr/bin $ : ls /usr/bin/dump*
52 -r-sr-s--- 1 root wireshark 50876 Apr 27 15:49 /usr/bin/dumpcap
[ 09:29:52 ]  Wed Apr 30  /usr/bin $ : su
Password:
[ 09:29:55 ]  Thu May 01  /usr/bin $ : ./dumpcap
File: /tmp/etherXXXXJ8STmt
Packets: 7 Packets dropped: 0
[ 09:32:15 ]  Thu May 01  /usr/bin $ : chown root:root ./dumpcap
[ 09:32:19 ]  Thu May 01  /usr/bin $ : chmod g+s ./dumpcap
[ 09:32:29 ]  Thu May 01  /usr/bin $ : chmod u+s ./dumpcap
[ 09:32:38 ]  Thu May 01  /usr/bin $ : ls /usr/bin/dump*
52 -r-sr-s--- 1 root root 50876 Apr 27 15:49 /usr/bin/dumpcap
[ 09:32:47 ]  Thu May 01  /usr/bin $ : exit
exit
[ 09:33:01 ]  Thu May 01  /usr/bin $ : whoami
Cyor
[ 09:33:06 ]  Thu May 01  /usr/bin $ : ./dumpcap
bash: ./dumpcap: Permission denied
[ 09:33:10 ]  Thu May 01  /usr/bin $ :  

I'm sure it's probably something simple that I'm unaware of or not seeing
for some reason. Can anybody point out what I'm doing wrong.

Thanks,
Bob Young
San Jose, CA.

-- 
gentoo-user@l.g.o mailing list