Changeset a079e73c


Ignore:
Timestamp:
04/11/2012 11:35:38 PM (12 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
2511f83
Parents:
f0af58fb
Message:

Update to wireshark-1.6.5. Add instructions to restrict use to authorized users.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@9904 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
4 edited

Legend:

Unmodified
Added
Removed

  • general.ent

    rf0af58fb ra079e73c  
    500500<!ENTITY whois-version                "5.0.12">
    501501<!ENTITY bind-version                 "9.8.1-P1">
    502 <!ENTITY wireshark-version            "0.99.6">
     502<!ENTITY wireshark-version            "1.6.5">
    503503<!ENTITY avahi-version                "0.6.31">
    504504<!ENTITY mod_dnssd-version            "0.6">

  • introduction/welcome/changelog.xml

    rf0af58fb ra079e73c  
    4646      <itemizedlist>
    4747        <listitem>
     48          <para>[bdubbs] - Update to wireshark-1.6.5.  Add instructions
     49          to restrict use to authorized users.
     50          Fixes
     51          <ulink url="&blfs-ticket-root;2816">#2815</ulink> and
     52          <ulink url="&blfs-ticket-root;2911">#2911</ulink>.</para>
     53        </listitem>
     54        <listitem>
    4855          <para>[bdubbs] - Fix screen to use the LFS value for gid.
    4956          Fixes

  • networking/netutils/wireshark.xml

    rf0af58fb ra079e73c  
    66
    77  <!ENTITY wireshark-download-http "http://www.wireshark.org/download/src/all-versions/wireshark-&wireshark-version;.tar.bz2">
    8   <!ENTITY wireshark-download-ftp  "&sources-anduin-ftp;/w/wireshark-&wireshark-version;.tar.bz2">
    9   <!ENTITY wireshark-md5sum        "e57a8c8b364c38df3da97e2ee9f0d0bc">
    10   <!ENTITY wireshark-size          "11.8 MB">
    11   <!ENTITY wireshark-buildsize     "449 MB">
    12   <!ENTITY wireshark-time          "6.4 SBU">
     8  <!ENTITY wireshark-download-ftp  " ">
     9  <!ENTITY wireshark-md5sum        "794948a10d387fc8e37d824ea11dbac9">
     10  <!ENTITY wireshark-size          "21 MB">
     11  <!ENTITY wireshark-buildsize     "952 MB">
     12  <!ENTITY wireshark-time          "5.8 SBU">
    1313]>
    1414
    … …  
    3939    network analyzers.</para>
    4040
     41    &lfs71_checked;
     42
    4143    <bridgehead renderas="sect3">Package Information</bridgehead>
    4244    <itemizedlist spacing="compact">
    … …  
    6466    <itemizedlist spacing="compact">
    6567      <listitem>
    66         <para>Additional Documentation: <ulink
    67         url="http://www.wireshark.org/docs/"/></para>
     68        <para>Additional Documentation:
     69           <ulink url="http://www.wireshark.org/download/docs/"/>
     70         </para>
    6871      </listitem>
    6972    </itemizedlist>
    … …  
    8386
    8487    <bridgehead renderas="sect4">Recommended</bridgehead>
    85     <para role="recommended"><xref linkend="libpcap"/>
    86     (required to capture data)</para>
     88    <para role="recommended">
     89      <xref linkend="libpcap"/> (required to capture data)
     90    </para>
    8791
    8892    <bridgehead renderas="sect4">Optional</bridgehead>
    8993    <para role="optional"><!-- <xref linkend="pkgconfig"/>, -->
    90     <xref linkend="gtk2"/> (to build the GUI front-end),
    91     <xref linkend="openssl"/>,
    92     <xref linkend="mitkrb"/>,
    93     <xref linkend="python2"/>,
    94     <xref linkend="pcre"/>,
    95     <xref linkend="gnutls"/>,
    96     <ulink url="http://www.net-snmp.org/">Net-SNMP</ulink>,
    97     <ulink url="http://www.gnu.org/software/adns/adns.html">adns</ulink>, and
    98     <ulink url="http://www.lua.org/">Lua</ulink></para>
    99 
    100     <!-- Though configure looks for all these, and the developers I'm
    101          sure use them, the doc sources are not included in the release
    102          tarball (they are in SVN, though)
    103     <bridgehead renderas="sect4">Optional (to build additional
    104     documentation)</bridgehead>
    105     <para role="optional"><xref linkend="doxygen"/>,
    106     <xref linkend="libxml"/>,
    107     <xref linkend="libxslt"/>, and
    108     <xref linkend="fop"/></para>
    109     -->
     94      <xref linkend="gtk2"/> or <xref linkend="gtk3"/> (to build the GUI front-end),
     95      <xref linkend="openssl"/>,
     96      <xref linkend="mitkrb"/>,
     97      <xref linkend="python2"/>,
     98      <xref linkend="pcre"/>,
     99      <xref linkend="gnutls"/>,
     100      <ulink url="http://www.portaudio.com/download.html">PortAudio</ulink>,
     101      <ulink url="http://www.maxmind.com/app/c">GeoIP</ulink>,
     102      <!-- <ulink url="http://www.net-snmp.org/">Net-SNMP</ulink>, -->
     103      <ulink url="http://www.gnu.org/software/adns/adns.html">adns</ulink>, and
     104      <ulink url="http://www.lua.org/">Lua</ulink>
     105    </para>
    110106
    111107    <para condition="html" role="usernotes">User Notes:
    … …  
    135131    <title>Installation of Wireshark</title>
    136132
    137     <para>Install <application>Wireshark</application> by running the following
    138     commands:</para>
     133    <para>Optionally, fix the description of the program in the title.
     134    The first change overwrites the default "SVN Unknown" in the title
     135    and the secong overwrites a utility script that resets the version
     136    to "unknown".</para>
     137
     138<screen><userinput>cat > svnversion.h &lt;&lt; "EOF"
     139#define SVNVERSION "BLFS"
     140#define SVNPATH "source"
     141EOF
     142
     143cat > make-version.pl &lt;&lt; "EOF"
     144#!/usr/bin/perl
     145EOF</userinput></screen>
     146
     147    <para><application>Wireshark</application> is a very large and complex
     148    application.  These instructions provide additional security measures to
     149    ensure that only trusted users are allowed to view network traffic.  First,
     150    set up a system groub for wireshark.  As the <systemitem
     151    class="username">root</systemitem> user:</para>
     152
     153<screen role="root"><userinput>groupadd -g 62 wireshark</userinput></screen>
     154
     155    <para>Continue to install <application>Wireshark</application> by running
     156    the following commands:</para>
    139157
    140158<screen><userinput>./configure --prefix=/usr \
    … …  
    150168
    151169install -v -m755 -d /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
    152 install -v -m644    FAQ README{,.linux} doc/README.* doc/*.{pod,txt} \
     170install -v -m755 -d /usr/share/pixmaps/wireshark &amp;&amp;
     171
     172install -v -m644    README{,.linux} doc/README.* doc/*.{pod,txt} \
    153173                    /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
     174
    154175pushd /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
    155 for FILENAME in ../../wireshark/*.html; do \
    156     ln -s -v $FILENAME .
    157 done &amp;&amp;
     176   for FILENAME in ../../wireshark/*.html; do
     177      ln -s -v $FILENAME .
     178   done &amp;&amp;
    158179popd &amp;&amp;
    159180
    160181install -v -m644 -D wireshark.desktop \
    161182                    /usr/share/applications/wireshark.desktop &amp;&amp;
     183
    162184install -v -m644 -D image/wsicon48.png \
    163185                    /usr/share/pixmaps/wireshark.png &amp;&amp;
    164 install -v -m755 -d /usr/share/pixmaps/wireshark &amp;&amp;
    165 install -v -m644 image/*.{png,ico,xpm,bmp} \
    166                  /usr/share/pixmaps/wireshark</userinput></screen>
     186
     187install -v -m644    image/*.{png,ico,xpm,bmp} \
     188                    /usr/share/pixmaps/wireshark</userinput></screen>
    167189
    168190    <para>If you downloaded any of the documentation files from the page
    … …  
    171193
    172194<screen role="root"><userinput>install -v -m644 <replaceable>&lt;Downloaded_Files&gt;</replaceable> /usr/share/doc/wireshark-&wireshark-version;</userinput></screen>
     195
     196  <para>Now, set ownership and permissions of sensitive applications to to
     197  only allow authorized users.  As the <systemitem
     198  class="username">root</systemitem> user:</para>
     199
     200<screen role="root"><userinput>chown -v root:wireshark /usr/bin/{tshark,dumpcap} &amp;&amp;
     201chmod -v 6550 /usr/bin/{tshark,dumpcap}</userinput></screen>
     202
     203  <para>Finally, add any users to the wireshark group with <userinput>usermod -a -G
     204  wireshark &lt;username&gt;</userinput>.</para>
    173205
    174206  </sect2>
    … …  
    184216    <application>OpenSSL</application>
    185217    <filename class='libraryfile'>libcrypto</filename> library is found.</para>
     218
     219    <para><option>--with-python</option>: This parameter is required if you
     220    want Python bindings built.</para>
    186221
    187222  </sect2>
    … …  
    239274      <seglistitem>
    240275        <seg>capinfos, dftest, dumpcap, editcap, idl2wrs, mergecap, randpkt,
    241         text2pcap, tshark and wireshark</seg>
    242         <seg>libwireshark.so, libwiretap.so and numerous dissector plugin
    243         modules</seg>
     276        rawshark, text2pcap, tshark and wireshark</seg>
     277        <seg>libwireshark.so, libwiretap.so, libwsutil.so, and
     278        numerous plugin modules</seg>
    244279        <seg>/usr/lib/wireshark, /usr/share/doc/wireshark-&wireshark-version;,
    245280        /usr/share/pixmaps/wireshark and /usr/share/wireshark</seg>
    … …  
    333368      </varlistentry>
    334369
     370      <varlistentry id="rawshark">
     371        <term><command>rawshark</command></term>
     372        <listitem>
     373          <para>dump and analyze raw libpcap data.</para>
     374          <indexterm zone="wireshark rawshark">
     375            <primary sortas="b-rawshark">rawshark</primary>
     376          </indexterm>
     377        </listitem>
     378      </varlistentry>
     379
    335380      <varlistentry id="text2pcap">
    336381        <term><command>text2pcap</command></term>

  • postlfs/config/users.xml

    rf0af58fb ra079e73c  
    9999        <row><entry>games   </entry><entry>60</entry><entry>60</entry></row>
    100100        <row><entry>kvm     </entry><entry>  </entry><entry>61</entry></row>
     101        <row><entry>wireshark</entry><entry> </entry><entry>62</entry></row>
    101102        <row><entry>scanner </entry><entry>  </entry><entry>70</entry></row>
    102103        <row><entry>avahi   </entry><entry>84</entry><entry>84</entry></row>
    … …  
    112113  <para>One value that is missing is 65534.  This value is customarily assigned
    113114  to the user <systemitem class="username">nobody</systemitem> and group
    114   <systemitem class="groupname">nogroup</systemitem> and is unnecessary.  <!--The
    115   issue is explained in more detail in the first note in the <xref
    116   linkend="nfs-utils-install"/> section.--></para>
     115  <systemitem class="groupname">nogroup</systemitem> and is unnecessary.
     116  </para>
    117117
    118118</sect1>
Note: See TracChangeset for help on using the changeset viewer.