解决tcpdump sudo权限下Permission denied
来源:互联网 发布:字体库软件下载 编辑:程序博客网 时间:2024/06/05 10:44
在新装的ubuntu server上脚本调用了tcpdump的命令进行抓包并保存致本地文件,当使用命令sudo tcpdump -i eth3 -w eth3_dump.pcap 的时候,出现错误:
$ sudo tcpdump -i eth3 -s 0 -w test_eth3.pcap
tcpdump: test_eth3.pcap: Permission denied
本地帐户是有sudo权限的,而且该账户不使用sudo权限能够在该目录创建文件,并没有报错,为何sudo 权限反倒 Permission Denied?
自然,这个问题最好只能是tcpdump出了问题,google 了一下,发现这是Ubuntu系统下的权限管理framework “AppArmor” 中设置了tcpdump 工作在enforce模式,其不能正常工作于是报错:
$ sudo apparmor_status
apparmor module is loaded.
10 profiles are loaded.
10 profiles are in enforce mode.
/sbin/dhclient3
/usr/bin/evince
/usr/bin/evince-previewer
/usr/bin/evince-thumbnailer
/usr/lib/NetworkManager/nm-dhcp-client.action
/usr/lib/connman/scripts/dhclient-script
/usr/lib/cups/backend/cups-pdf
/usr/sbin/cupsd
/usr/sbin/tcpdump
/usr/share/gdm/guest-session/Xsession
0 profiles are in complain mode.
1 processes have profiles defined.
1 processes are in enforce mode :
/usr/sbin/cupsd (1240)
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
$ sudo vim /sys/kernel/security/apparmor/profiles
/usr/bin/evince-thumbnailer (enforce)
/usr/bin/evince-previewer (enforce)
/usr/sbin/tcpdump (enforce)
/usr/bin/evince (enforce)
/usr/sbin/cupsd (enforce)
/usr/lib/cups/backend/cups-pdf (enforce)
/usr/lib/connman/scripts/dhclient-script (enforce)
/usr/lib/NetworkManager/nm-dhcp-client.action (enforce)
/sbin/dhclient3 (enforce)
/usr/share/gdm/guest-session/Xsession (enforce)
tcpdump不能工作在enforce模式下,于是改为使用complain模式:
$ sudo aa-complain tcpdump
Setting /etc/apparmor.d/usr.sbin.tcpdump to complain mode.
$ sudo apparmor_status
apparmor module is loaded.
10 profiles are loaded.
9 profiles are in enforce mode.
/sbin/dhclient3
/usr/bin/evince
/usr/bin/evince-previewer
/usr/bin/evince-thumbnailer
/usr/lib/NetworkManager/nm-dhcp-client.action
/usr/lib/connman/scripts/dhclient-script
/usr/lib/cups/backend/cups-pdf
/usr/sbin/cupsd
/usr/share/gdm/guest-session/Xsession
1 profiles are in complain mode.
/usr/sbin/tcpdump
1 processes have profiles defined.
1 processes are in enforce mode :
/usr/sbin/cupsd (1240)
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
- 解决tcpdump sudo权限下Permission denied
- tcpdump permission denied问题解决
- FC4下tcpdump -w写文件报错:permission denied
- 解决Jenkins+Gitlab出现的stderr: Permission denied权限问题
- Android--adb权限拒绝访问(permission denied)解决
- Android 动态申请权限 (解决:open failed: EACCES (Permission denied))
- ubuntu下执行文件报Permission denied权限错误
- MAC下解决pip安装权限问题 OSError: [Errno 13] Permission denied OSError: [Errno 1] Operation not permitted:
- tcpdump -w xxxxx.pcap 提示 Permission denied
- 避免’sudo echo x >’ 时’Permission denied’
- 避免’sudo echo x >’ 时’Permission denied’
- 避免’sudo echo x >’ 时’Permission denied’
- sudo echo x >’ 时’Permission denied’
- sudo echo x > **.** 时 base: : Permission denied
- 避免’sudo echo x >’ 时’Permission denied’
- Linux下permission denied
- failed to copy 'tcpdump' to '/data/local/tcpdump': Permission denied
- HDFS 权限问题:Permission denied
- ORA-12154问题解决
- NSRunLoop是消息机制的处理模式
- 重新组织数据之一 :Self Encapsulate Field(自封装值域)
- linux指令之ps
- 有关配置lvs的测试
- 解决tcpdump sudo权限下Permission denied
- 收集的android开发文章教程等资源
- GUI_DOWNLOAD遇到的问题
- 第10章 AmS(ActivityManagerService)内部原理
- jQuery实现表格全选、反选、删除一行或多行、增加一行
- Ecmall购物流程解析
- Dijkstra求解单源点最短路径
- hdu 2188 悼念512汶川大地震遇难同胞——选拔志愿者
- 第 4 章 多例模式【Multition Pattern】