[Bug 236819] [tcpdump] capsicum-related changes broke reading IPsec ESP decryption keys from a file

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed May 1 07:01:39 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236819

--- Comment #7 from commit-hook at freebsd.org ---
A commit references this bug:

Author: oshogbo
Date: Wed May  1 07:00:57 UTC 2019
New revision: 346986
URL: https://svnweb.freebsd.org/changeset/base/346986

Log:
  MFC r346263:
    tcpdump: disable Capsicum if -E option is provided.

    The -E is used to provide a secret for decrypting IPsec.
    The secret may be provided through command line or as the file.
    The problem is that tcpdump doesn't support yet opening files in capability
mode
    and the file may contain a list of the files to open.

    As a workaround, for now, let's just disable capsicum if the -E
    the option is provided.

    PR:           236819

Changes:
_U  stable/12/
  stable/12/contrib/tcpdump/tcpdump.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the freebsd-net mailing list