[Snort-devel] log file owner and snort priv dropping

From: David Wilburn <dwilburn(at)mitre.org>
Date: Thu Aug 28 2003 - 06:16:27 EDT

I'm running Snort 2.0.1, and have noticed that the unified log output and the session.log file are always owned by root, even when I use the "-u" flag. To make matters more complicated, it appears that Snort also ignores umask values and sets these files to be mode 600. This unfortunately prevents me from running barnyard and other tools as a non-root user. It looks like snort is opening these log files before it drops its privileges. I don't know what other log files are affected by this, and it looks like some work correctly while others don't.

Can this please be corrected in the next release?

Thanks,

Dave Wilburn

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Thu Aug 28 06:23:53 2003