From e89ecc1f3a2b2c46eaddd4e87942dfb225883a72 Mon Sep 17 00:00:00 2001 From: "Andreas B. Mundt" Date: Thu, 7 Dec 2023 15:33:56 +0100 Subject: [PATCH] Use apt hook to modify permissions after upgrade of wireshark. The previous solution did not work for the graphical user interface. Group membership did only show up on the console. --- roles/lmn_fvs/tasks/main.yml | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/roles/lmn_fvs/tasks/main.yml b/roles/lmn_fvs/tasks/main.yml index 5717a59..d45749f 100644 --- a/roles/lmn_fvs/tasks/main.yml +++ b/roles/lmn_fvs/tasks/main.yml @@ -64,10 +64,13 @@ http_proxy: '' # this is needed to avoid ttf-mscorefonts-installer picking up aptcacher -- name: Add wireshark group membership to users to allow dumping packets - ansible.builtin.lineinfile: - path: /etc/security/group.conf - line: '*;*;*;Al0000-2400;wireshark' +- name: Make sure wireshark works for all users after installation and upgrades + ansible.builtin.copy: + dest: /etc/apt/apt.conf.d/92wireshark4all + content: | + ## Modify permissions after installation/upgrade to allow all + ## users dumping packages on network interfaces for wireshark + DPkg::Post-Invoke {"/usr/bin/chmod o+x /usr/bin/dumpcap || true"; }; - name: Create firefox policies directory @@ -181,7 +184,6 @@ #- name: Disable automatic lock screen and user specific modifications # ansible.builtin.copy: # path: /etc/xdg/kscreenlockerrc -# create: true # content: | # [Daemon][$i] # Autolock=false