--- a/wireshark-1.8.1.ebuild +++ b/wireshark-1.8.1.ebuild @@ -202,7 +202,7 @@ src_install() { pkg_postinst() { if use caps && use pcap; then - fcaps 0:wireshark 550 cap_net_raw,cap_net_admin "${EROOT}"/usr/bin/dumpcap + fcaps 0:wireshark 550 cap_dac_read_search,cap_net_raw,cap_net_admin "${EROOT}"/usr/bin/dumpcap fi echo ewarn "NOTE: To run wireshark as normal user you have to add yourself to"