No policy for tcpdump -j option (time stamp type)

[Graeme Hewson]

The tcpdump -J option to list the supported time stamp types is allowed:

# tcpdump -i eth0 -J
Time stamp types for eth0 (use option -j to set):
  host (Host)
  adapter (Adapter)
  adapter_unsynced (Adapter, not synced with system time)

However, the -j option for other than the default, host, is not allowed:

# tcpdump -i eth0 -j adapter
tcpdump: eth0: You don't have permission to capture on that device
(You don't have permission to capture on that device)

The attached patch adds capability net_admin to allow -j:

# tcpdump -i eth0 -j adapter
tcpdump: WARNING: eth0: That type of time stamp is not supported by that device
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes

[Steve Beattie (sbeattie)]

Hi Graeme,

Sorry for the delay in handling this bug. AppArmor upstream does not provide the tcpdump profile; this actually provided by the tcpdump package in Ubuntu. Moving the bug there.

Thanks!

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "capability net_admin for tcpdump" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[Launchpad Janitor (janitor)]

This bug was fixed in the package tcpdump - 4.5.1-2ubuntu2

---------------
tcpdump (4.5.1-2ubuntu2) utopic; urgency=medium

  * debian/usr.sbin.tcpdump: allow capability net_admin to support '-j'. Patch
    thanks to Graeme Hewson. (LP: #1229664)
 -- Jamie Strandboge <email address hidden> Thu, 26 Jun 2014 08:08:07 -0500