Date: Wed, 01 May 2019 06:59:33 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 236819] [tcpdump] capsicum-related changes broke reading IPsec ESP decryption keys from a file Message-ID: <bug-236819-7501-yq8oaw5IEL@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-236819-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-236819-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236819 --- Comment #6 from commit-hook@freebsd.org --- A commit references this bug: Author: oshogbo Date: Wed May 1 06:59:04 UTC 2019 New revision: 346985 URL: https://svnweb.freebsd.org/changeset/base/346985 Log: MFC r346263: tcpdump: disable Capsicum if -E option is provided. The -E is used to provide a secret for decrypting IPsec. The secret may be provided through command line or as the file. The problem is that tcpdump doesn't support yet opening files in capability mode and the file may contain a list of the files to open. As a workaround, for now, let's just disable capsicum if the -E the option is provided. PR: 236819 MFC after: 2 weeks Changes: _U stable/11/ stable/11/contrib/tcpdump/tcpdump.c -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-236819-7501-yq8oaw5IEL>