chroot issues
Russell Fulton
r.fulton at auckland.ac.nz
Mon Sep 25 23:19:09 EDT 2006
Carter Bullard wrote:
> Hey Russell,
> I referring to the input files,
Doh! I thought I must be missing something!
when argus reads its input from a pcap
> formatted file.
> My assumption is that you won't chroot if you're reading a packet dump,
> but you
> never know what people will do ;o)
>
> Can these packet input files be outside the chroot'd directory?
> I'll open the output files after the chroot and change in uid and gid.
>
Certainly :) and if you are just reading files then you are probably
not running as root anyway. But as you say "You never know what people
will do ;o)"!
Russell
More information about the argus
mailing list