Package: snort
Version: 2.9.5.3-3
Severity: normal

Dear Maintainer,

stopping (or restarting) snort result in a message:
snort[2674]: Could not remove pid file /var/run//snort_eth0.pid:
Permission denied

Because snort has "snort"-user permissions the file has the wrong
permissions:
# ll /var/run/snort_eth0.pid
-rw-r----- 1 root root 5 Jul  6 09:05 /var/run/snort_eth0.pid

I think the problem is, that the init script creates the pid file (with
root permissions) and later on the snort process (with snort
permissions) tries to delete the file. After snort exits the file is
deleted by the init. Maybe the init-script can change the permissions?
BTW: I'm using systemd

Thanks for packaging snort!

Bye



-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.15-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages snort depends on:
ii  adduser                      3.113+nmu3
ii  debconf [debconf-2.0]        1.5.53
ii  libc6                        2.19-4
ii  libdaq0                      0.6.2-2
ii  libdumbnet1                  1.12-4
ii  libpcap0.8                   1.5.3-4
ii  libpcre3                     1:8.31-5
ii  logrotate                    3.8.7-1
ii  net-tools                    1.60-26
ii  rsyslog [system-log-daemon]  8.2.2-3
ii  snort-common                 2.9.5.3-3
ii  snort-common-libraries       2.9.5.3-3
ii  snort-rules-default          2.9.5.3-3
ii  zlib1g                       1:1.2.8.dfsg-1

Versions of packages snort recommends:
ii  iproute2  3.15.0-2

Versions of packages snort suggests:
pn  snort-doc  <none>

-- Configuration Files:
/etc/default/snort changed [not included]

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to