Hi, On Thu, Jun 3, 2021 at 7:30 PM Dennis Boone <d...@msu.edu> wrote: > The following session was executed as root: > > ozymandias 179 # tcpdump -r /tmp/ax0.cap -Z root > tcpdump: /tmp/ax0.cap: Permission denied > ozymandias 180 # tcpdump -r /tmp/ax0.cap -Z tcpdump > tcpdump: /tmp/ax0.cap: Permission denied > ozymandias 181 # dir /tmp/ax0.cap > -rw-r--r-- 1 tcpdump tcpdump 434176 jun 3 11:41 /tmp/ax0.cap > > Order of the "-r" and "-Z" options make no difference.
Thanks for the report. Is there anything specific to your setup that could explain this? I can't reproduce it and as described it seems surprising that root would get EPERM no matter what -Z option is used. What are the mount options on /tmp? Does this file have extended attributes?