From owner-freebsd-security@FreeBSD.ORG  Fri Aug 27 14:31:15 2010
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4F48010656A5
	for <freebsd-security@freebsd.org>;
	Fri, 27 Aug 2010 14:31:15 +0000 (UTC)
	(envelope-from pieter@thedarkside.nl)
Received: from mail.thelostparadise.com (router.thelostparadise.com
	[IPv6:2a02:898:0:30::30:1])
	by mx1.freebsd.org (Postfix) with ESMTP id 801DC8FC1B
	for <freebsd-security@freebsd.org>;
	Fri, 27 Aug 2010 14:31:14 +0000 (UTC)
Received: by mail.thelostparadise.com (Postfix, from userid 127)
	id 8AC6673061; Fri, 27 Aug 2010 16:31:13 +0200 (CEST)
Received: from localhost by mail.thelostparadise.com (Postfix) with ESMTP id
	6F3C273038; Fri, 27 Aug 2010 16:31:11 +0200 (CEST)
Message-ID: <4C77CC2E.4030408@thedarkside.nl>
Date: Fri, 27 Aug 2010 16:31:10 +0200
From: Pieter de Boer <pieter@thedarkside.nl>
MIME-Version: 1.0
To: =?UTF-8?B?SXN0dsOhbg==?= <leccine@gmail.com>
References: <slrni7eu1h.21lb.vadim_nuclight@kernblitz.nuclight.avtf.net>	<4C77A267.10102@thelostparadise.com>	<AANLkTim1frPvChMJfDLnHe6LW3HnR=AWeYcCsf-tx3V-@mail.gmail.com>	<5d88fc9506514cabc7390e66a1f9872f@localhost>
	<AANLkTikgbBzUmd0fBaGfQQqR_SFXA82yhBk0WAffX-Si@mail.gmail.com>
In-Reply-To: <AANLkTikgbBzUmd0fBaGfQQqR_SFXA82yhBk0WAffX-Si@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_40,RDNS_NONE
	autolearn=no version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	aberdeen.thelostparadise.com
Cc: freebsd-security@freebsd.org
Subject: Re: tcpdump -z
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Aug 2010 14:31:15 -0000

On 08/27/2010 04:27 PM, István wrote:
> Well to be honest i don't see any case when i want to give sudo+tcpdump
> access to any user on my box. And those who are admins/roots anyway the "su
> -" just works perfectly and they can run tcpdump.
>
I simply change the permissions on /dev/bpf* so that some mortal users 
can run tcpdump directly. It isn't as granular as a well-configured 
sudo, but worksforme.

-- 
Pieter