diff options
author | root <root@rshg047.dnsready.net> | 2011-05-10 22:33:36 +0000 |
---|---|---|
committer | root <root@rshg047.dnsready.net> | 2011-05-10 22:33:36 +0000 |
commit | 01b47af6474ac094ec199c7d75208874f8842d87 (patch) | |
tree | 44a048d09e5233a98d35c660e67be2a818832a56 /testing/kismet/kismet.install | |
parent | bbb460f85242e6ac03f47b74b9d0be66ff089ac4 (diff) |
Tue May 10 22:33:36 UTC 2011
Diffstat (limited to 'testing/kismet/kismet.install')
-rw-r--r-- | testing/kismet/kismet.install | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/testing/kismet/kismet.install b/testing/kismet/kismet.install new file mode 100644 index 000000000..0bc806034 --- /dev/null +++ b/testing/kismet/kismet.install @@ -0,0 +1,34 @@ +## arg 1: the new package version +post_install() { + post_upgrade + + cat << EOP + If you have not done so already, read the README file and the FAQ file. + You MUST edit /etc/kismet.conf and configure Kismet for your system, or + it will NOT run properly!" + + Kismet has been installed with a SUID ROOT CAPTURE HELPER executeable by + users in the group ' kismet '. This WILL ALLOW USERS IN THIS GROUP + TO ALTER YOUR NETWORK INTERACE STATES, but is more secure than running + all of Kismet as root. ONLY users in this group will be able to + run Kismet and capture from physical network devices. +EOP +} + +## arg 1: the new package version +## arg 2: the old package version +post_upgrade() { + # Add the group needed to use the limited-functionality binary "kismet_capture" + # Change group ownership of "kismet_capture" to this new group + # Preserve the file mode bits of "kismet_capture" + getent group "kismet" &>/dev/null || /usr/sbin/groupadd -r -g 315 kismet &>/dev/null + chown root:kismet "/usr/bin/kismet_capture" + chmod 4550 "/usr/bin/kismet_capture" +} + +## arg 1: the old package version +post_remove() { + getent group "kismet" &>/dev/null && /usr/sbin/groupdel kismet &>/dev/null +} + +# vim:set ts=2 sw=2 et: |