Need help with permissions fix for tcpdump

Question

Level 3

570 points

Need help with permissions fix for tcpdump

Hello All,

On one of my mini's I get the following whenever I repair permissions:

"Permissions differ on "usr/sbin/tcpdump", should be -rwxr-xr-x , they are -rwsr-xr-x ."

But Disk Utility won't repair it saying:
"Warning: SUID file "usr/sbin/tcpdump" has been modified and will not be repaired."

Does anyone know the exact commands I would use in terminal to correct the permissions on this file?

Thanks in advance for your help!
Jamy

iMac C2D 2Ghz,Mini C2D 2Ghz, G3 Lombard PB, Mac OS X (10.5.3), AEBS, ATV

Posted on Jun 11, 2008 4:50 PM

Reply

Answer 1

baltwo

Level 9

62,386 points

Jun 11, 2008 5:18 PM in response to Jamy

You can't. See http://support.apple.com/kb/TS1448?viewlocale=en_US for details.

Reply

Answer 2

Jamy Author

Level 3

570 points

Jun 11, 2008 5:29 PM in response to baltwo

Bawlto, I know I can't do anything about the SUID message, but there IS a way to fix the permissions for the file in terminal. That's what I am looking for, the commands to fix the file.

Reply

Answer 3

glsmith

Level 3

875 points

Jun 11, 2008 5:48 PM in response to Jamy

sudo chmod u-s /usr/sbin/tcpdump

will remove that bit.

Message was edited by: glsmith

Reply

Answer 4

Jamy Author

Level 3

570 points

Jun 11, 2008 5:54 PM in response to glsmith

Perfect! That did it glsmith. Thanks! Now all permissions are in order. (Don't know how the "s" got there in the first place though.

Regards,
Jamy

Message was edited by: Jamy

Reply

Answer 5

baltwo

Level 9

62,386 points

Jun 11, 2008 5:57 PM in response to glsmith

Didn't work for me on /Applications, which shows the same message. Personally, ignore it and get on with your life.

Reply

Answer 6

glsmith

Level 3

875 points

Jun 11, 2008 6:22 PM in response to baltwo

Well, I don't have any problems getting rid of that bit in /Applications, but then I didn't have anything with that bit set so had to set it first. Could be ACLs getting in your way.

Regardless, you're right those errors can be ignored. And, not all suid bits should be removed. tcpdump, however, does not need that bit set, so it should have been removed...

Reply