]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
tcpdump: disable Capsicum if -E option is provided.
authoroshogbo <oshogbo@FreeBSD.org>
Tue, 16 Apr 2019 04:12:41 +0000 (04:12 +0000)
committeroshogbo <oshogbo@FreeBSD.org>
Tue, 16 Apr 2019 04:12:41 +0000 (04:12 +0000)
commit3509a7361db74ecd33864fb44c3f42520d20ccfd
tree24f270959b996b351e19376c8626fbee9ac3f9aa
parentfaf2f0725c6295fcbe831eb6060fa75253ebdbb4
tcpdump: disable Capsicum if -E option is provided.

The -E is used to provide a secret for decrypting IPsec.
The secret may be provided through command line or as the file.
The problem is that tcpdump doesn't support yet opening files in capability mode
and the file may contain a list of the files to open.

As a workaround, for now, let's just disable capsicum if the -E
the option is provided.

PR: 236819
MFC after: 2 weeks
contrib/tcpdump/tcpdump.c