Re: Run SNORT as different user

[Brian <bmc () snort org>]

According to Ralf Hildebrandt:
> On Fri, Mar 01, 2002 at 11:17:19AM -0800, spyguy703 wrote:
> > Is there a way to run snort as a user other than root?
>
> Yes. Check "man snort" (-u and -g option)
> Chroot is -t

There is also another way.  If you can make the device that pcap reads
from readable by a user or group other than root, then you should be 
able to run snort as that user or group.

For example, in openbsd I set my bpf device to g+rw.  This change
allows any user in the wheel group to sniff.

crw-rw----  1 root  wheel   23,   0 Mar  2 01:31 /dev/bpf0

-- 
The student help desk at my old college had the internal motto of:
"Tech Services - We Aim To Please, We Shoot To Kill" -- H. Wade Minter

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users