Snort mailing list archives
Re: snort & logfile permissions
From: Erek Adams <erek () theadamsfamily net>
Date: Wed, 14 Aug 2002 15:37:00 -0700 (PDT)
On Wed, 14 Aug 2002, Sander Smeenk wrote:
Can anyone tell me if, and how, I can have snort create it's logfiles -rw-r----- snort.snort alert So that I can put users who need to read the logs in group 'snort' etc? Currently it just creates the files as mode 600 :/
*sigh* It's amazing what you can find in the docs, man pags, and help from the program. --- [erek@merf]/var/log/snort#snort -\? Initializing Output Plugins! -*> Snort! <*- Version 1.9.0beta (Build 175) By Martin Roesch (roesch () sourcefire com, www.snort.org) USAGE: snort [-options] <filter options> Options: [...snip...] -m <umask> Set umask = <umask> [...snip...] --- And also from: --- [erek@merf]/var/log/snort#man snort [...snip...] -m umask Set the file mode creation mask to umask [...snip...] --- And also from: --- http://www.snort.org/docs/writing_rules-1.9.0/chap2.html#tth_sEc2.1.3 [...snip...] umask Umask when running (snort -m). Example: config umask: 022 [...snip...] --- Three penalty drinks. Cheers! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort & logfile permissions Sander Smeenk (Aug 14)
- Re: snort & logfile permissions J. Craig Woods (Aug 14)
- Re: snort & logfile permissions Erek Adams (Aug 14)