Re: [DAQ][PATCH 1/3] fix --enable-xyz-module options

[Russ Combs <rcombs () sourcefire com>]

On Tue, Aug 3, 2010 at 10:15 AM, Will Metcalf <william.metcalf () gmail com>wrote:

> We use libcap-ng in for this in a errr ummm different project, and it
> works really well ;-)...
>
> http://people.redhat.com/sgrubb/libcap-ng/

Thanks, we'll have a look!

> Regards,
>
> Will
>
> On Tue, Aug 3, 2010 at 8:57 AM, Florian Westphal <fwestphal () astaro com>
> wrote:
> > Russ Combs <rcombs () sourcefire com> wrote:
> > > Thanks for submitting your patches.  We will look into incorporating any
> > > changes into the next release.  I'll give you a response to each one way
> or
> > > the other when I get a chance.
> > >
> > > How is the DAQ working for you?
> >
> > Quite nice so far, thanks for asking.
> >
> > One suggestion is to add a note about "-P" to the snort "nfq"
> > documentation -- snort will exit on something like "ping -s 2000" if you
> > use connection tracking with NFQUEUE otherwise.
> >
> > Another thing that i'd like to see is support for unprivileged operation
> (setuid
> > while retaining CAP_NET_ADMIN), I tried to make this work without too
> > much hackery in daq, but failed. I'll send out an RFC patch later today;
> maybe
> > someone else has an idea how to make it work in a better fashion.

Good comments - will investigate.

> >
> ------------------------------------------------------------------------------
> > The Palm PDK Hot Apps Program offers developers who use the
> > Plug-In Development Kit to bring their C/C++ apps to Palm for a share
> > of $1 Million in cash or HP Products. Visit us here for more details:
> > http://p.sf.net/sfu/dev2dev-palm
> > _______________________________________________
> > Snort-devel mailing list
> > Snort-devel () lists sourceforge net
> > https://lists.sourceforge.net/lists/listinfo/snort-devel
------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel