Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Snort-users] Any way to change permissions of the unified output fi

from [Bamm Visscher] Network Security [Permanent Link]
Subject: Re: [Snort-users] Any way to change permissions of the unified output files?
Date: Wed, 25 May 2005 18:50:05 -0500 
From ./snort --help


-m <umask> Set umask = <umask>

Bammkkkk


On 5/25/05, Rob Baxter <rbaxter@xapiens.net> wrote:


The output files generated by the unified output plugin (ie the alert
and log files) always seem to be created with only rw permissions for
the root user. I need to collect the log files from a Solaris machine
which does not allow remote root logins. Is there any way to get snort
to set a different acl on the output files? I've tried using the -u
option to run snort as a different user but the files still get created
as root. I can whip up a cron job to periodically chown the files but
I'd prefer something less hackey.

</rob>



-- 
sguil - The Analyst Console for NSM
http://sguil.sf.net


-------------------------------------------------------
SF.Net email is sponsored by: GoToMeeting - the easiest way to collaborate
online with coworkers and clients while avoiding the high cost of travel and
communications. There is no equipment to buy and you can meet as often as
you want. Try it free.http://ads.osdn.com/?ad_idt02&alloc_id135&opÌk
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Snort-users] Any way to change permissions of the unified output files?, Rob Baxter
Next by Date:  [Snort-users] BASE Updates and the way forward, Joel Esler
Previous by Thread:  [Snort-users] Any way to change permissions of the unified output files?, Rob Baxter
Next by Thread:  [Snort-users] BASE Updates and the way forward, Joel Esler
Indexes:  [Date] [Thread] [Top] [All Lists]