[Snort-devel] Weekend patches

Brian Kifiak bk at ...103...
Sun Oct 29 14:32:30 EST 2000


> * UID=0 check added at startup time, Snort doesn't allow non-root
> users to even get started

Excuse my ignorance, but why?  Isn't it possible that a normal user
could perform the required operations?  (Due to a kernel patch,
perhaps?)  Wouldn't it be more robust to die when it actually ran
into an operation it couldn't perform?



More information about the Snort-devel mailing list