Snort mailing list archives

RE: Forbid snort to delete alerts from a mysql database for security reasons?


From: "Michael Steele" <michaels () silicondefense com>
Date: Mon, 4 Nov 2002 14:49:10 -0800

Edin,

All depends, Snort really only needs insert and select to operate with
MySQL.

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Edin
Dizdarevic
Sent: Sunday, November 03, 2002 5:09 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Forbid snort to delete alerts from a mysql
database for security reasons?


Hello,

Is it really nessesary to grant snort a privilege to delete alerts
from a db?

This could be also used by an attacker after hacking the sensor...

Any hints?

Greetings,

Edin

-- 
Edin Dizdarevic



-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: