Re: Review of new English templates for wireshark

Hi,

I forgot to point out that the template is just a slight modification
of the already reviewed wireshark template.
There were multiple threads about reviewing the wireshark template on
this list, thus probably the best entry point to past discussions is
this:
https://lists.debian.org/cgi-bin/search?P=3Dwireshark&DEFAULTOP=3Dor&B=3DGd=
ebian-l10n-english&SORT=3D&HITSPERPAGE=3D10&xP=3Dwireshark&xFILTERS=3DGdebi=
an-l10n-english%7E-%7E%7E4294967295

Please CC me on the replies, I'm not on this list.

I'll discuss the "scap" group name on debian-devel, just haven't got
into it yet. I guess replacing the group name in the template would be
fine without another round of language review.

Thanks,
Balint

B=C3=A1lint R=C3=A9czey <[email protected]> ezt =C3=ADrta (id=C5=91pon=
t: 2025. szept.
28., V, 11:45):
>
> Hi,
>
> I would like to add the following new template to the wireshark source pa=
ckage:
>
> ---
> Template: stratoshark/install-setuid
> Type: boolean
> Default: false
> _Description: Should non-superusers be able to capture system calls?
>  The falcodump external capture utility (extcap) can be installed in a
>  way that allows members of the "scap" system group to capture system
>  calls. This is recommended over the alternative of running Stratoshark
>  directly as root, because less of the code will run with elevated
>  privileges.
>  .
>  For more detailed information please see
>  /usr/share/doc/wireshark-common/README.Debian.
>  .
>  Enabling this feature may be a security risk, so it is disabled by
>  default. If in doubt, it is suggested to leave it disabled.
>
> Template: stratoshark/addgroup-failed
> Type: error
> _Description: Creating the "scap" system group failed
>  The "scap" group does not exist, and creating it failed, so
>  Stratoshark cannot be configured to capture system calls as an unprivile=
ged
>  user.
>  .
>  Please create the "scap" system group and try configuring
>  stratoshark again.
>
> Template: stratoshark/group-is-user-group
> Type: error
> _Description: The "scap" group is a system group
>  The "scap" group exists as a user group, but the preferred
>  configuration is for it to be created as a system group.
>  .
>  As a result, purging stratoshark will not remove the "scap"
>  group, but everything else should work properly.
> ---
>
> The proposed change is staged at:
> https://salsa.debian.org/rbalint/wireshark/-/commits/debian/experimental
>
> Please let me know if the change needs further adjustments.
>
> Cheers,
> Balint