Snort mailing list archives

Re: Has anyone got snort and acid running on RH with SELinux?


From: Dirk Geschke <Dirk_Geschke () genua de>
Date: Fri, 01 Dec 2006 09:54:33 +0100

Hi Raymond,

Has anyone got snort and acid running on RH with SELinux?
I googled,checked the email archive and found no one who has had
success.

this is difficult to answer if you don't say where the problem
is...

But as far as I remember was there a problem with the database. If
the database runs on the same host as the sensor then it is likely
that snort (or barnyard?) is trying to use the unix domain socket
to communicate with the database. 

Normally SELinux will block this access, you have to permit it.
Or you can try to connect the database via the network socket...

And no, I do not use SELinux...

Best regards

Dirk 



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: