View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0007329||Kali Linux||[All Projects] Kali Package Bug||public||2021-09-14 19:33||2021-09-15 09:32|
|Target Version||Fixed in Version|
|Summary||0007329: Wireshark not opening document when not root|
When using xdg-open on a pcap or double-clicking a pcap, as a user that is not root or in the wireshark group, Wireshark will open but not the Pcap.
In /usr/share/applications/wireshark.desktop, the Exec line contains %f two times.
According to the documentation at https://specifications.freedesktop.org/desktop-entry-spec/latest/ar01s07.html, "A command line may contain at most one %f, %u, %F or %U field code.".
This cause Wireshark to launch but without arguments.
|Steps To Reproduce||Using a user that is not in the wireshark group: |
1. xdg-open somepcap.pcap
2. (An authentication window will appear to run the application as root)
3. (Wireshark will open, without the document)
Following the original Exec parameter for wireshark:
`Exec=sh -c "id -Gn | grep -qw wireshark && wireshark %f || pkexec wireshark %f"`
You are right, freedesktop indicates that a desktop file can only have '%f' once (https://specifications.freedesktop.org/desktop-entry-spec/latest/ar01s07.html), so it's only replacing that code the first match. Therefore wireshark only opens files if the user is part of the wireshark group.
I've fixed this and will be uploaded soon, but for now as a workaround you can add your user to the wireshark group (this is now the default in kali)
`sudo usermod $(whoami) -aG wireshark`
You probably need to reboot after adding the user to the group.
Here is the fix