Added suid USE flag to allow users in tcpdump group to sniff traffic, bug #283527, thank Hank Leininger for report.

(Portage version: 2.1.8.3/cvs/Linux x86_64)

2 files changed, 99 insertions, 1 deletions

diff --git a/net-analyzer/tcpdump/ChangeLog b/net-analyzer/tcpdump/ChangeLog
index eed6c4dbe272..dbc1cb92ca49 100644
--- a/net-analyzer/tcpdump/ChangeLog
+++ b/net-analyzer/tcpdump/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-analyzer/tcpdump
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/tcpdump/ChangeLog,v 1.140 2010/04/02 06:02:17 pva Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/tcpdump/ChangeLog,v 1.141 2010/04/02 07:07:51 pva Exp $
+
+*tcpdump-4.1.0-r1 (02 Apr 2010)
+
+  02 Apr 2010; Peter Volkov <pva@gentoo.org> +tcpdump-4.1.0-r1.ebuild:
+  Added suid USE flag to allow users in tcpdump group to sniff traffic, bug
+  #283527, thank Hank Leininger for report.
 
 *tcpdump-4.1.0 (02 Apr 2010)
 
diff --git a/net-analyzer/tcpdump/tcpdump-4.1.0-r1.ebuild b/net-analyzer/tcpdump/tcpdump-4.1.0-r1.ebuild
new file mode 100644
index 000000000000..ec3b5862fcc3
--- /dev/null
+++ b/net-analyzer/tcpdump/tcpdump-4.1.0-r1.ebuild
@@ -0,0 +1,92 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/tcpdump/tcpdump-4.1.0-r1.ebuild,v 1.1 2010/04/02 07:07:51 pva Exp $
+
+EAPI="2"
+inherit flag-o-matic toolchain-funcs eutils versionator autotools
+
+DESCRIPTION="A Tool for network monitoring and data acquisition"
+HOMEPAGE="http://www.tcpdump.org/"
+SRC_URI="http://www.tcpdump.org/release/${P}.tar.gz
+		http://www.jp.tcpdump.org/release/${P}.tar.gz"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd ~x86-freebsd ~amd64-linux ~x86-linux"
+IUSE="+chroot smi ssl ipv6 -samba suid test"
+
+RDEPEND="net-libs/libpcap
+	smi? ( net-libs/libsmi )
+	ssl? ( >=dev-libs/openssl-0.9.6m )"
+DEPEND="${RDEPEND}
+	test? ( app-arch/sharutils
+		dev-lang/perl )"
+
+S=${WORKDIR}/${PN}-$(get_version_component_range 1-2)
+
+pkg_setup() {
+	if use samba ; then
+		ewarn
+		ewarn "CAUTION !!! CAUTION !!! CAUTION"
+		ewarn
+		ewarn "You're about to compile tcpdump with samba printing support"
+		ewarn "Upstream tags it as 'possibly-buggy SMB printer'"
+		ewarn "So think twice whether this is fine with you"
+		ewarn
+		ewarn "CAUTION !!! CAUTION !!! CAUTION"
+		ewarn
+	fi
+	enewgroup tcpdump
+	enewuser tcpdump -1 -1 -1 tcpdump
+}
+
+src_prepare() {
+	epatch "${FILESDIR}/${P}-without-chroot.patch"
+	eautoconf
+}
+
+src_configure() {
+	# tcpdump needs some optymalization. see bug #108391
+	( ! is-flag -O? || is-flag -O0 ) && append-flags -O2
+
+	replace-flags -O[3-9] -O2
+	filter-flags -finline-functions
+
+	econf --with-user=tcpdump \
+		$(use_with ssl crypto) \
+		$(use_with smi) \
+		$(use_enable ipv6) \
+		$(use_enable samba smb) \
+		$(use_with chroot chroot /var/lib/tcpdump)
+}
+
+src_compile() {
+	make CCOPT="$CFLAGS" || die "make failed"
+}
+
+src_test() {
+	#sed '/^\(bgp_vpn_attrset\|ikev2four\|espudp1\|eapon1\)/d;' -i tests/TESTLIST
+	#make check || die "tests failed"
+	ewarn "tests are broken in the release... (tests directory missed in tarball)"
+}
+
+src_install() {
+	dosbin tcpdump || die
+	doman tcpdump.1 || die
+	dodoc *.awk || die
+	dodoc CHANGES CREDITS README || die
+
+	if use chroot; then
+		keepdir /var/lib/tcpdump
+		fperms 700 /var/lib/tcpdump
+		fowners tcpdump:tcpdump /var/lib/tcpdump
+	fi
+	if use suid; then
+		fowners root:tcpdump /usr/sbin/tcpdump
+		fperms 4110 /usr/sbin/tcpdump
+	fi
+}
+
+pkg_postinst() {
+	elog "To let normal users run tcpdump add them into tcpdump group."
+}