Snort mailing list archives
Possible to configure snort for an alternative to /etc for default conf. files?
From: Rich Burridge <rich.burridge () oracle com>
Date: Thu, 25 Sep 2014 14:20:08 -0700
Hi, Is it possible to build snort from source (a configure option that I'm overlooking perhaps), so that it looks for its various default configuration files (like snort.conf) under (say) /etc/snort instead of directly under /etc ? I did notice: --sysconfdir=DIR read-only single-machine data [PREFIX/etc] when I did "configure --help", but I'm not sure that's the solution. From a quick glance at the snort source code, looking directly under "/etc/" seems to be baked in. I do know about the "-c" runtime option to allow a different conf file, but I'm the guy that creates the snort package for Solaris. I've been asked to consider that the default install for snort config files should be /etc/snort/... rather that /etc, so as not to "pollute" /etc. I'm just trying to determine if it's (easily) possible to do. Thanks. ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge (Sep 25)
- Re: Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge (Sep 26)