Bug 2148308

Summary: wireshark group not created when installing only wireshark-cli
Product: [Fedora] Fedora Reporter: Bryce Mills <brycemills>
Component: wiresharkAssignee: Michal Ruprich <mruprich>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 37CC: alekcejk, denis, huzaifas, lemenkov, mruprich, peter, rvokal, sergey.avseyev
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: wireshark-4.0.1-1.fc37 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-12-04 00:28:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Bryce Mills 2022-11-25 00:09:08 UTC
Description of problem:
When installing only wireshark-cli package (no wireshark gui), wireshark group not created
As a result dumpcap has root group ownership.
Therefore can not start dumpcap with unprivileged user, by adding it to wireshark group

Version-Release number of selected component (if applicable):
wireshark-cli-1:4.0.0-1.fc37.x86_64

How reproducible:
always

Steps to Reproduce:
1. dnf install wireshark-cli
2. grep wireshark /etc/group # empty
3. ls -l /bin/dumpcap
-rwxr-x--- 1 root root 119888 Oct 14 07:40 /bin/dumpcap

Actual results:
1. wireshark group not created
2. dumpcap has root group

Expected results:
1. wireshark group created
2. dumpcap has wireshark group


Additional info:
This is caused by sysusers file only in wireshark package, not wireshark-cli
https://src.fedoraproject.org/rpms/wireshark/blob/rawhide/f/wireshark.spec#_202

Comment 1 Michal Ruprich 2022-11-25 12:37:03 UTC
Thanks Bryce,

this is interesting. The additional info that you provided is not the cause(I think) since the spec file regarding the sysusers is the same both for Rawhide and F37 and for some reason this works for Rawhide:

# dnf install wiresharl-cli
<no warning about wireshark group not being used>
# grep wireshark /etc/group
wireshark:x:992:
# ls -lh /bin/dumpcap
-rwxr-x---. 1 root wireshark 119896 Oct 27 05:30 /bin/dumpcap

No idea why there is a difference between the versions. I am going to take a look.

Comment 2 Michal Ruprich 2022-11-25 14:33:54 UTC
Seems like moving the line you mentioned under cli files works but I don't understand why. Why does the same work in rawhide? Well anyway, it actually makes sense to move this under cli files.

Comment 3 Fedora Update System 2022-11-25 17:05:05 UTC
FEDORA-2022-cf9ae8e4ff has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-cf9ae8e4ff

Comment 4 Fedora Update System 2022-11-26 01:30:22 UTC
FEDORA-2022-cf9ae8e4ff has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-cf9ae8e4ff`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-cf9ae8e4ff

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2022-12-04 00:28:32 UTC
FEDORA-2022-cf9ae8e4ff has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.