12345678910111213141516171819 |
- #! /bin/sh
- #
- # Unfortunately, macOS's devfs is based on the old FreeBSD
- # one, not the current one, so there's no way to configure it
- # to create BPF devices with particular owners or groups.
- # This startup item will make it owned by the admin group,
- # with permissions rw-rw----, so that anybody in the admin
- # group can use programs that capture or send raw packets.
- #
- # Change this as appropriate for your site, e.g. to make
- # it owned by a particular user without changing the permissions,
- # so only that user and the super-user can capture or send raw
- # packets, or give it the permissions rw-r-----, so that
- # only the super-user can send raw packets but anybody in the
- # admin group can capture packets.
- #
- chgrp admin /dev/bpf*
- chmod g+rw /dev/bpf*
|