summaryrefslogtreecommitdiffstats
path: root/lib/libpcap/libpcap/chmod_bpf
diff options
context:
space:
mode:
authorCameron Katri <me@cameronkatri.com>2021-05-10 14:55:20 -0400
committerCameron Katri <me@cameronkatri.com>2021-05-10 14:55:20 -0400
commitd88d199f23088ac1c3d7696374b0a1c1c1c18358 (patch)
tree977307e478f76c5de5ca141268cf8ce0309a09eb /lib/libpcap/libpcap/chmod_bpf
parent5fd83771641d15c418f747bd343ba6738d3875f7 (diff)
downloadapple_cmds-d88d199f23088ac1c3d7696374b0a1c1c1c18358.tar.gz
apple_cmds-d88d199f23088ac1c3d7696374b0a1c1c1c18358.tar.zst
apple_cmds-d88d199f23088ac1c3d7696374b0a1c1c1c18358.zip
libpcap-98.40.1
Diffstat (limited to 'lib/libpcap/libpcap/chmod_bpf')
-rwxr-xr-xlib/libpcap/libpcap/chmod_bpf19
1 files changed, 19 insertions, 0 deletions
diff --git a/lib/libpcap/libpcap/chmod_bpf b/lib/libpcap/libpcap/chmod_bpf
new file mode 100755
index 0000000..946fec3
--- /dev/null
+++ b/lib/libpcap/libpcap/chmod_bpf
@@ -0,0 +1,19 @@
+#! /bin/sh
+
+#
+# Unfortunately, macOS's devfs is based on the old FreeBSD
+# one, not the current one, so there's no way to configure it
+# to create BPF devices with particular owners or groups.
+# This startup item will make it owned by the admin group,
+# with permissions rw-rw----, so that anybody in the admin
+# group can use programs that capture or send raw packets.
+#
+# Change this as appropriate for your site, e.g. to make
+# it owned by a particular user without changing the permissions,
+# so only that user and the super-user can capture or send raw
+# packets, or give it the permissions rw-r-----, so that
+# only the super-user can send raw packets but anybody in the
+# admin group can capture packets.
+#
+chgrp admin /dev/bpf*
+chmod g+rw /dev/bpf*