Re: Forbid snort to delete alerts from a mysql database for security reasons?

["Roman Danyliw" <roman () danyliw com>]

Edin,

The DELETE privilege is not required by snort for DB logging.

Roman

On Sun, 03 Nov 2002 14:08:33 +0100, Edin Dizdarevic
<edin.dizdarevic () brainMedia de> wrote :

> Hello,
>
> Is it really nessesary to grant snort a privilege to delete alerts
> from a db?
>
> This could be also used by an attacker after hacking the sensor...
>
> Any hints?
>
> Greetings,
>
> Edin
>
> -- 
> Edin Dizdarevic
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: ApacheCon, November 18-21 in
> Las Vegas (supported by COMDEX), the only Apache event to be
> fully supported by the ASF. http://www.apachecon.com
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users