Blame wireshark-1.6.1-group-msg.patch

Jan Safranek 155755
Customize 'permission denied' error.
Jan Safranek 155755
Jan Safranek 155755
Add Fedora-specific message to error output when dumpcap cannot be started
Jan Safranek 155755
because of permissions.
Jan Safranek 155755
Peter Hatina f670be
diff --git a/capture_sync.c b/capture_sync.c
Peter Hatina f670be
index 8c49ed2..65e242d 100644
Peter Hatina f670be
--- a/capture_sync.c
Peter Hatina f670be
+++ b/capture_sync.c
Peter Hatina f670be
@@ -368,6 +368,7 @@ sync_pipe_start(capture_options *capture_opts, capture_session *cap_session)
Jan Safranek 155755
     gchar *signal_pipe_name;
Jan Safranek 155755
 #else
Jan Safranek 155755
     char errmsg[1024+1];
Jan Safranek 155755
+    const char *securitymsg = "";
Jan Safranek 155755
     int sync_pipe[2];                       /* pipe used to send messages from child to parent */
Jan Safranek 155755
     enum PIPES { PIPE_READ, PIPE_WRITE };   /* Constants 0 and 1 for PIPE_READ and PIPE_WRITE */
Jan Safranek 155755
 #endif
Peter Hatina f670be
@@ -638,8 +639,10 @@ sync_pipe_start(capture_options *capture_opts, capture_session *cap_session)
Jan Safranek d08c88
         dup2(sync_pipe[PIPE_WRITE], 2);
Jan Safranek d08c88
         ws_close(sync_pipe[PIPE_READ]);
Peter Hatina f670be
         execv(argv[0], argv);
Jan Safranek d08c88
-        g_snprintf(errmsg, sizeof errmsg, "Couldn't run %s in child process: %s",
Jan Safranek d08c88
-                   argv[0], g_strerror(errno));
Jan Safranek d08c88
+        if (errno == EPERM || errno == EACCES)
Peter Hatina f670be
+            securitymsg = "\nAre you a member of the 'wireshark' group? Try running\n'usermod -a -G wireshark _your_username_' as root.";
Jan Safranek d08c88
+        g_snprintf(errmsg, sizeof errmsg, "Couldn't run %s in child process: %s%s",
Peter Hatina f670be
+            argv[0], g_strerror(errno), securitymsg);
Jan Safranek d08c88
         sync_pipe_errmsg_to_parent(2, errmsg, "");
Jan Safranek 155755
 
Jan Safranek d08c88
         /* Exit with "_exit()", so that we don't close the connection
Peter Hatina f670be
@@ -731,6 +734,7 @@ sync_pipe_open_command(char** argv, int *data_read_fd,
Jan Safranek d08c88
     PROCESS_INFORMATION pi;
Jan Safranek 155755
 #else
Jan Safranek 155755
     char errmsg[1024+1];
Jan Safranek 155755
+    const char *securitymsg = "";
Jan Safranek 155755
     int sync_pipe[2];                       /* pipe used to send messages from child to parent */
Jan Safranek 155755
     int data_pipe[2];                       /* pipe used to send data from child to parent */
Jan Safranek 155755
 #endif
Peter Hatina f670be
@@ -865,8 +869,10 @@ sync_pipe_open_command(char** argv, int *data_read_fd,
Jan Safranek 155755
         ws_close(sync_pipe[PIPE_READ]);
Jan Safranek 155755
         ws_close(sync_pipe[PIPE_WRITE]);
Peter Hatina f670be
         execv(argv[0], argv);
Jan Safranek 155755
-        g_snprintf(errmsg, sizeof errmsg, "Couldn't run %s in child process: %s",
Jan Safranek 16d607
-                   argv[0], g_strerror(errno));
Peter Hatina f670be
+        if (errno == EPERM || errno == EACCES)
Peter Hatina f670be
+            securitymsg = "\nAre you a member of the 'wireshark' group? Try running\n'usermod -a -G wireshark _your_username_' as root.";
Jan Safranek 155755
+        g_snprintf(errmsg, sizeof errmsg, "Couldn't run %s in child process: %s%s",
Peter Hatina f670be
+            argv[0], g_strerror(errno), securitymsg);
Jan Safranek 155755
         sync_pipe_errmsg_to_parent(2, errmsg, "");
Jan Safranek 155755
 
Jan Safranek 155755
         /* Exit with "_exit()", so that we don't close the connection