Re: [tcpdump-workers] Privileges on Mac

2009-04-07 Thread Guy Harris
On Apr 1, 2009, at 1:42 AM, Tobias Weber wrote: On 01.04.2009, at 00:47, Guy Harris wrote: A set-UID program that does what privileged stuff it needs to do (opening a pcap_t, (what I've seen is using libpcap in the helper tool only and remote controlling that from the GUI) Exactly - li

Re: [tcpdump-workers] Privileges on Mac

2009-04-01 Thread Tobias Weber
On 01.04.2009, at 00:47, Guy Harris wrote: If you're talking about Authorization Services, they suggest using set-UID programs (that changed years ago, but no one uses the new way) A set-UID program that does what privileged stuff it needs to do (opening a pcap_t, (what I've seen is usin

Re: [tcpdump-workers] Privileges on Mac

2009-03-31 Thread Guy Harris
On Mar 31, 2009, at 2:42 PM, Tobias Weber wrote: libpcap comes with Mac OS, but to use it from GUI applications without changing permissions in /dev is complicated. Nothing unique about Mac OS X here - the situation on *BSD is the same (not surprisingly, as *BSD and Mac OS X both use BPF),

[tcpdump-workers] Privileges on Mac

2009-03-31 Thread Tobias Weber
Hi, libpcap comes with Mac OS, but to use it from GUI applications without changing permissions in /dev is complicated. The OS includes a helper tool which can ask the user for credentials and return a file descriptor opened with root rights. It'd be nice if libpcap could be initialized wi