Jan Schaumann on Nostr: TIL: On Ubuntu, AppArmor restricts tcpdump from reading files that don't end in ...
TIL: On Ubuntu, AppArmor restricts tcpdump from reading files that don't end in ".pcap". 🤦♂️
$ ls -l /tmp/out
-rw------- 1 tcpdump tcpdump 13651 Feb 13 15:49 /tmp/out
$ sudo tcpdump -n -r /tmp/out
tcpdump: /tmp/out: Permission denied
$ sudo mv /tmp/out /tmp/out.pcap
$ sudo tcpdump -n -r /tmp/out.pcap
reading from file /tmp/out.pcap, link-type EN10MB (Ethernet), snapshot length 262144
[...]
Why are people trying so hard to make "file extensions" happen?
$ ls -l /tmp/out
-rw------- 1 tcpdump tcpdump 13651 Feb 13 15:49 /tmp/out
$ sudo tcpdump -n -r /tmp/out
tcpdump: /tmp/out: Permission denied
$ sudo mv /tmp/out /tmp/out.pcap
$ sudo tcpdump -n -r /tmp/out.pcap
reading from file /tmp/out.pcap, link-type EN10MB (Ethernet), snapshot length 262144
[...]
Why are people trying so hard to make "file extensions" happen?