From 47f4fb064c143f3a0dcb919125793577cd72f37d Mon Sep 17 00:00:00 2001 From: Andrea Cardaci Date: Sun, 22 Sep 2019 12:01:15 +0200 Subject: [PATCH] Add note about AppArmor in tcpdump --- _gtfobins/tcpdump.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/_gtfobins/tcpdump.md b/_gtfobins/tcpdump.md index 2b9cd53..862519d 100644 --- a/_gtfobins/tcpdump.md +++ b/_gtfobins/tcpdump.md @@ -1,5 +1,8 @@ --- -description: These require some traffic to be actually captured. Also note that the subprocess is immediately sent to the background. +description: | + These require some traffic to be actually captured. Also note that the subprocess is immediately sent to the background. + + In recent distributions (e.g., Debian 10 and Ubuntu 18) AppArmor limits the `postrotate-command` to a small subset of predefined commands thus preventing the execution of the following. functions: command: - code: |