Install wireshark setuid

This installs wireshark setuid and also adds the kali (or user chosen during installation) to the wireshark group.

bin/kali-finish-install

@@ -55,10 +55,13 @@ configure_zsh() {
 configure_usergroups() {
   # Create the kaboxer group if needed
   addgroup --system kaboxer || true
+  # Create the wireshark group if needed
+  addgroup --system wireshark || true
 
   # kaboxer - for kaboxer
   # dialout - for serial access
-  kali_groups="kaboxer,dialout"
+  # wireshark - capture sessions in wireshark
+  kali_groups="kaboxer,dialout,wireshark"
 
   for user in $(get_user_list); do
       echo "INFO: adding user '$user' to groups '$kali_groups'"

kali-config/common/includes.chroot/usr/lib/live/config/0031-kali-user-setup

@@ -17,7 +17,8 @@ configure_usergroups() {
     addgroup --system kaboxer || true  # Ensures the group exists
     # kaboxer - for kaboxer
     # dialout - for serial port access
-    kali_groups="kaboxer,dialout"
+    # wireshark - capture sessions without being root
+    kali_groups="kaboxer,dialout,wireshark"
 
     usermod -a -G $kali_groups kali
 }

kali-config/common/includes.installer/preseed.cfg

@@ -54,6 +54,6 @@ samba-common samba-common/dhcp boolean false
 macchanger macchanger/automatically_run boolean false
 kismet-capture-common kismet-capture-common/install-users string 
 kismet-capture-common kismet-capture-common/install-setuid boolean true
-wireshark-common wireshark-common/install-setuid boolean false
+wireshark-common wireshark-common/install-setuid boolean true
 sslh sslh/inetd_or_standalone select standalone
 atftpd atftpd/use_inetd boolean false

kali-config/common/preseed/kali.cfg.chroot

@@ -3,3 +3,5 @@
 # Do not register it in inetd so that its status can be controlled
 # individually
 atftpd atftpd/use_inetd boolean false
+# Install wireshark setuid
+wireshark-common wireshark-common/install-setuid boolean true