Re: snort_acid_rh9.pdf

[Paul Schmehl <pauls () utdallas edu>]

--On Wednesday, April 21, 2004 11:14 AM +0200 "Steffen \"Maetzky (extern)" 
<Steffen.Maetzky () gedas de> wrote:

> Hi,
>
> I have a question about P. Harpers installation-guide:
>
> 1) mysql> grant INSERT,SELECT on root.* to snort@localhost;  
>
>
> why root and not snort?

No particular reason.  You can use any username that you create that has 
the correct rights.
> grant INSERT,SELECT,UPDATE on snort.* to snort@localhost identified by
> 'password';
>
> I think UPDATE is needed to update the last_sid value of table
> snort.sensor and CREATE,DELETE are not needed to put data into a
> database
The only thing you need is select and update.
> for other sensors?
Every sensor would need a user with the same rights - select and update.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users