Public bug reported:

tcp dump comes with a apparmor file

/etc/apparmor.d/usr.sbin.tcpdump

that tells to can write .pcap files:

# for -r, -F and -w
/**.[pP][cC][aA][pP] rw,

but using the -W and -C modes it will also write pcap0 etc. files

we've put apparmor in complain mode as a workaround

------
lsb_release -rd
version: 4.9.0-1ubuntu1~ubuntu12.04.1  

Description:    Ubuntu 12.04.4 LTS
Release:        12.04
------
apt-cache policy tcpdump
tcpdump:
  Installed: 4.9.0-1ubuntu1~ubuntu12.04.1
  Candidate: 4.9.0-1ubuntu1~ubuntu12.04.1
  Version table:
 *** 4.9.0-1ubuntu1~ubuntu12.04.1 0
        500 http://nl.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 
Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 
Packages
        100 /var/lib/dpkg/status
     4.5.1-2ubuntu1~ubuntu12.04.1 0
        100 http://nl.archive.ubuntu.com/ubuntu/ precise-backports/main amd64 
Packages
     4.2.1-1ubuntu2 0
        500 http://nl.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

** Affects: tcpdump (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1677129

Title:
  Apparmor config does  not allow pcap cyclic buffer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tcpdump/+bug/1677129/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to