Re: non-root user cannot run snort

[Brian <bmc () snort org>]

On Tue, Jan 27, 2004 at 12:08:43AM +0800, Robert Storey wrote:
> I'm very new at using Snort, so forgive the ignorance :-(
>
> I want to run Snort as some other user than root. Unfortunately, I only
> have success as root. 

Sure, non-root users can run snort.  One of my first submissions to
snort that got "accepted" as to allow non-root users to run snort.

This has been hashed out on snort-users many times.

On BSD, this is rather simple.  chown bpf devices so that bob can read
from the interfaces.

On Linux, you will need to patch your kernel.  One of many patches
that provide support for this is available at http://killa.net/infosec/acls/

-brian


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users