aboutsummaryrefslogtreecommitdiffstats
path: root/config/snort/snort_download_rules.php
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2011-11-10 19:31:01 +0000
committerErmal <eri@pfsense.org>2011-11-10 19:31:20 +0000
commit612d5d31a66d33185eb150ba9107d641930c5332 (patch)
tree47a559b5c01e83c679df0e91e5a6a65e17e03fe3 /config/snort/snort_download_rules.php
parent40eb9111c2d6ac52dd90b776784703974fb63372 (diff)
downloadpfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.tar.gz
pfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.tar.bz2
pfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.zip
Run snort as root user in pfSense this does not change much and allows to reload snort rather than stop start it.
Diffstat (limited to 'config/snort/snort_download_rules.php')
-rw-r--r--config/snort/snort_download_rules.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/config/snort/snort_download_rules.php b/config/snort/snort_download_rules.php
index 4c6ab662..1056c337 100644
--- a/config/snort/snort_download_rules.php
+++ b/config/snort/snort_download_rules.php
@@ -733,10 +733,12 @@ if (is_dir('/usr/local/etc/snort/tmp')) {
exec("/bin/rm -r /usr/local/etc/snort/tmp/rules_bk");
}
-/* make all dirs snorts */
+/* XXX: These are needed if snort is run as snort user
mwexec("/usr/sbin/chown -R snort:snort /var/log/snort", true);
mwexec("/usr/sbin/chown -R snort:snort /usr/local/etc/snort", true);
mwexec("/usr/sbin/chown -R snort:snort /usr/local/lib/snort", true);
+*/
+/* make all dirs snorts */
mwexec("/bin/chmod -R 755 /var/log/snort", true);
mwexec("/bin/chmod -R 755 /usr/local/etc/snort", true);
mwexec("/bin/chmod -R 755 /usr/local/lib/snort", true);