Snort Module

[Nick Hudson]

I did and have a semi fix for now you can take a look at crater/security/snort if you wish.  As of snort 1.9.1 there is a new snort.conf file that you can use that seems to be better so I have fixed that also.  There were a few things in the BUILD file that no longer were used and the /etc/init.d/snort init file was broken, I semi fixed that for now also.  Like I said if you wish look at it in crater and fix anything you see.

Nick




-------Original Message-------
From: Auke Kok <auke.kok at planet.nl>
Sent: 04/01/03 03:45 PM
To: "Lunar Linux Mailing List! (all are welcome)" <lunar at lunar-linux.org>
Subject: Re: Snort Module

> 
> On Tue, 2003-04-01 at 21:28, Nick Hudson wrote:
> Does anyone know who hacked last on the snort module?  Its very badly
broken and it rewrites your snort.conf file everytime you rebuild it.  Good
thing is that it saves it to snort.conf.bk but if you compile it twice
without knowing it was rewritten your snort.conf working file is gone.  I am
going to attempt to get things back working correctly.  
> 
> Thanks!
> 
> Nick 

this could have happened with all the core updates lately, also I put
prepare_install in all the BUILD files (except kernel modules).

DO's and DON'Ts in BUILD files:

* DO put prepare_install in there

* DON'T even as much as touch a user-config file

* DO handle all user config files in POST_INSTALL

* DON'T ever overwrite a config file if it already exists

* DO use the () > $C_FIFO 2>&1 construct

* DON'T put stuff around or beside the () > $C_FIFO 2>&1 construct

if I need to explain any of these let me know... I spose they are clear
but in case it's not we could discuss them in here...

greetz!

sofar

PS nick: I'll take a look at snorts BUILD if I were you, it needs some
work...

-- 
Auke Kok <auke.kok at planet.nl>

_______________________________________________
Lunar mailing list
Lunar at lunar-linux.org
<a target=_blank
href="http://lunar-linux.org/mailman/listinfo/lunar">http://lunar-linux.org/mailman/listinfo/lunar</a>
>