-
Notifications
You must be signed in to change notification settings - Fork 239
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add command line option -Z --relinquish-privileges as for tcpdump #149
Comments
Unfortunately option |
Sadly, we cannot change an existing command line option, we can only create new ones. The application already has code to drop SUID; we will add the code to change the userid. |
To listen network interface, tcpflow requires to be run using the root privileges. Therefore the output files are also owned by root and cannot be accessed by non-privileged users. The idea is to have the same behavior as tcpdump.
tcpdump provides the following command line option:
I propose to implement the same command line option to tcpflow in the next months. I will submit a pull request.
For curiosity, the corresponding tcpdump source code is in the function
droproot()
. See https://github.com/the-tcpdump-group/tcpdump/blob/master/tcpdump.c#L611 . Below is a very simplified extract:The text was updated successfully, but these errors were encountered: