[Snort-users] chroot'd snort + flexresp

Andreas Hasenack andreas at ...1574...
Wed Jul 24 13:00:04 EDT 2002


Em Mon, Jul 22, 2002 at 10:39:55AM -0400, Chris Green escreveu:
> > Is there any way to force snort to open the raw socket before dropping
> > privs?
> 
> Move the Drop after the initializations, thats the way it used to be
> and I sent out a request to see if anyone cared if I changed it back
> to the old way. No one really did.

What do you mean exactly? Will it remain necessary to be root to use
flexresp?





More information about the Snort-users mailing list