summaryrefslogtreecommitdiffstats
path: root/packaging/debian/templates
blob: 52e9f63d9d16822729d0143418fdc7590ddd94e9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
# These templates have been reviewed by the debian-l10n-english
# team
#
# If modifications/additions/rewording are needed, please ask
# debian-l10n-english@lists.debian.org for advice.
#
# Even minor modifications require translation updates and such
# changes should be coordinated with translators and reviewers.

Template: wireshark-common/install-setuid
Type: boolean
Default: false
_Description: Should non-superusers be able to capture packets?
 Dumpcap can be installed in a way that allows members of the "wireshark"
 system group to capture packets. This is recommended over the
 alternative of running Wireshark/Tshark directly as root, because
 less of the code will run with elevated privileges.
 .
 For more detailed information please see
 /usr/share/doc/wireshark-common/README.Debian.
 .
 Enabling this feature may be a security risk, so it is disabled by
 default. If in doubt, it is suggested to leave it disabled.

Template: wireshark-common/addgroup-failed
Type: error
_Description: Creating the wireshark system group failed
 The wireshark group does not exist, and creating it failed, so
 Wireshark cannot be configured to capture traffic as an unprivileged
 user.
 .
 Please create the wireshark system group and try configuring
 wireshark-common again.

Template: wireshark-common/group-is-user-group
Type: error
_Description: The wireshark group is a system group
 The wireshark group exists as a user group, but the preferred
 configuration is for it to be created as a system group.
 .
 As a result, purging wireshark-common will not remove the wireshark
 group, but everything else should work properly.

Template: wireshark-common/setcap-failed
Type: error
_Description: Setting capabilities for dumpcap failed
 The attempt to use Linux capabilities to grant packet-capturing
 privileges to the dumpcap binary failed. Instead, it has had the
 set-user-id bit set.

Template: wireshark-common/group-removal-failed
Type: error
_Description: Removal of the wireshark group failed
 When the wireshark-common package is configured to allow
 non-superusers to capture packets the postinst script of
 wireshark-common creates the wireshark group as a system group.
 .
 However, on this system the wireshark group is a user group instead of
 being a system group, so purging wireshark-common did not remove it.
 .
 If the group is no longer needed, please remove it manually.

Template: logray/install-setuid
Type: boolean
Default: false
_Description: Should non-superusers be able to capture system calls?
 The falcodump external capture utility (extcap) can be installed in a
 way that allows members of the "scap" system group to capture system
 calls. This is recommended over the alternative of running Logray
 directly as root, because less of the code will run with elevated
 privileges.
 .
 For more detailed information please see
 /usr/share/doc/wireshark-common/README.Debian.
 .
 Enabling this feature may be a security risk, so it is disabled by
 default. If in doubt, it is suggested to leave it disabled.

Template: logray/addgroup-failed
Type: error
_Description: Creating the "scap" system group failed
 The "scap" group does not exist, and creating it failed, so
 Logray cannot be configured to capture system calls as an unprivileged
 user.
 .
 Please create the "scap" system group and try configuring
 logray again.

Template: logray/group-is-user-group
Type: error
_Description: The "scap" group is a system group
 The "scap" group exists as a user group, but the preferred
 configuration is for it to be created as a system group.
 .
 As a result, purging logray will not remove the "scap"
 group, but everything else should work properly.