Snort mailing list archives

Re: Reload via Signal HUP does not work if you aren't root or are chroot


From: Todd Wease <twease () sourcefire com>
Date: Mon, 25 Jan 2010 20:48:38 -0500

The reason this isn't allowed is because snort gets re-execed and will need to open pcap again which requires root privileges. You can try compiling snort with --enable-reload, which will reload a new configuration without execing, so doesn't require root privileges.


On 01/25/2010 08:00 PM, Willst Mail wrote:
We currently run snort on Red Hat Linux as a non-root user and not in chroot. When trying to kill -HUP the snort PID to reload the configuration, I get the following:

"Reload via Signal HUP does not work if you aren't root or are chroot"

This seems to be by design for our setup. Are there recommendations for how to reload the config files when running as non-root and not in a jail - or do people just reload the daemon?


------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: