Date: Sat, 17 Jul 2004 11:46:47 +0800 (CST) From: =?big5?q?Patrick=20Dung?= <patrick_dkt@yahoo.com.hk> To: Joerg Wallerich <jw@net.in.tum.de> Cc: freebsd-current@freebsd.org Subject: Re: tcpdump (/dev/bpf* permission) in FreeBSD-current Message-ID: <20040717034647.13655.qmail@web51806.mail.yahoo.com> In-Reply-To: <20040716134240.GA25987@net.in.tum.de>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi It just works. Thanks. BTW, I think it is good to run tcpdump with a user like pcap or bpf for security reason. Regards Patrick --- Joerg Wallerich <jw@net.in.tum.de> 內容：> On Thu, Jul 15, 2004 at 10:32:34PM +0800, Patrick > Dung wrote: > > Hi > > > > For FreeBSD-stable, I can change the permission of > the > > /dev/bpf*. > > But for FreeBSD-current, the bpf device is created > at > > runtime. There is no way to decided the user/group > and > > permission of the device created. (/etc/devfs.conf > can > > be used, but it had to be start after the device > is > > created, where it is not created at boot time). > > > > I have asked this question in Freebsd-questions > but > > the problem remains unsolved: > > > > > http://docs.freebsd.org/cgi/getmsg.cgi?fetch=256848+0+archive/2004/freebsd-questions/20040711.freebsd-questions > > > > Hi, > > add to /etc/devfs.rules: > > [devfs_ruleset_sniffer=10] > add path 'bpf*' unhide mode 0660 group bpf > > and to /etc/rc.conf > > devfs_system_ruleset="devfs_ruleset_sniffer" > > > This grants access to bpf devices to all members of > group 'bpf'. I don't know if this is 'the way to do > it[TM]' > but it does work. > > Joerg > > > -- > ---------------------------------------------------------------- > - Joerg Wallerich - > jw@net.in.tum.de - > - Technische Universitaet Muenchen - Phone +49 89 > 289 18035 - > ---------------------------------------------------------------- > _________________________________________________________ 必殺技、飲歌、小星星... 浪漫鈴聲 情心連繫 http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040717034647.13655.qmail>