As of version 2.9.0, the /usr/bin/dumpcap binary isn't usable by users in the wireshark group because the line containing "chgrp wireshark "${EROOT}"/usr/bin/dumpcap" was removed from pkg_postinst between 2.6.5 and 2.9.0 The permissions and filecaps are still all correct.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a43ab9ed5658c436dc795cbcae1534851b7e207d commit a43ab9ed5658c436dc795cbcae1534851b7e207d Author: Jeroen Roovers <jer@gentoo.org> AuthorDate: 2018-12-15 14:03:09 +0000 Commit: Jeroen Roovers <jer@gentoo.org> CommitDate: 2018-12-15 14:04:56 +0000 net-analyzer/wireshark: Fix /usr/bin/dumpcap ownership Package-Manager: Portage-2.3.52, Repoman-2.3.12 Fixes: https://bugs.gentoo.org/673188 Signed-off-by: Jeroen Roovers <jer@gentoo.org> .../wireshark/{wireshark-2.9.0.ebuild => wireshark-2.9.0-r1.ebuild} | 1 + net-analyzer/wireshark/wireshark-99999999.ebuild | 1 + 2 files changed, 2 insertions(+)