Snort mailing list archives
Re: snort_acid_rh9.pdf
From: Paul Schmehl <pauls () utdallas edu>
Date: Wed, 21 Apr 2004 18:31:54 -0500
--On Wednesday, April 21, 2004 11:14 AM +0200 "Steffen \"Maetzky (extern)" <Steffen.Maetzky () gedas de> wrote:
Hi, I have a question about P. Harpers installation-guide: 1) mysql> grant INSERT,SELECT on root.* to snort@localhost; why root and not snort?
No particular reason. You can use any username that you create that has the correct rights.
grant INSERT,SELECT,UPDATE on snort.* to snort@localhost identified by 'password'; I think UPDATE is needed to update the last_sid value of table snort.sensor and CREATE,DELETE are not needed to put data into a database
The only thing you need is select and update.
for other sensors?
Every sensor would need a user with the same rights - select and update. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort_acid_rh9.pdf Maetzky (extern) (Apr 21)
- Re: snort_acid_rh9.pdf Paul Schmehl (Apr 21)
- <Possible follow-ups>
- RE: snort_acid_rh9.pdf Harper, Patrick (Apr 21)