xref: /freebsd/contrib/libpcap/ChmodBPF/ChmodBPF (revision b00ab754)
1*b00ab754SHans Petter Selasky#! /bin/sh
2*b00ab754SHans Petter Selasky
3*b00ab754SHans Petter Selasky. /etc/rc.common
4*b00ab754SHans Petter Selasky
5*b00ab754SHans Petter SelaskyStartService ()
6*b00ab754SHans Petter Selasky{
7*b00ab754SHans Petter Selasky	#
8*b00ab754SHans Petter Selasky	# Unfortunately, Mac OS X's devfs is based on the old FreeBSD
9*b00ab754SHans Petter Selasky	# one, not the current one, so there's no way to configure it
10*b00ab754SHans Petter Selasky	# to create BPF devices with particular owners or groups.
11*b00ab754SHans Petter Selasky	# This startup item will make it owned by the admin group,
12*b00ab754SHans Petter Selasky	# with permissions rw-rw----, so that anybody in the admin
13*b00ab754SHans Petter Selasky	# group can use programs that capture or send raw packets.
14*b00ab754SHans Petter Selasky	#
15*b00ab754SHans Petter Selasky	# Change this as appropriate for your site, e.g. to make
16*b00ab754SHans Petter Selasky	# it owned by a particular user without changing the permissions,
17*b00ab754SHans Petter Selasky	# so only that user and the super-user can capture or send raw
18*b00ab754SHans Petter Selasky	# packets, or give it the permissions rw-r-----, so that
19*b00ab754SHans Petter Selasky	# only the super-user can send raw packets but anybody in the
20*b00ab754SHans Petter Selasky	# admin group can capture packets.
21*b00ab754SHans Petter Selasky	#
22*b00ab754SHans Petter Selasky	chgrp admin /dev/bpf*
23*b00ab754SHans Petter Selasky	chmod g+rw /dev/bpf*
24*b00ab754SHans Petter Selasky}
25*b00ab754SHans Petter Selasky
26*b00ab754SHans Petter SelaskyStopService ()
27*b00ab754SHans Petter Selasky{
28*b00ab754SHans Petter Selasky	return 0;
29*b00ab754SHans Petter Selasky}
30*b00ab754SHans Petter Selasky
31*b00ab754SHans Petter SelaskyRestartService () { StartService; }
32*b00ab754SHans Petter Selasky
33*b00ab754SHans Petter SelaskyRunService "$1"
34