Snort mailing list archives

request: drop versioning of /usr/lib64/snort-2.9.8.3_dynamicpreprocessor /usr/lib64/snort-2.9.8.3_dynamicengine directories in snort RPMS


From: Marcin Dulak <marcin.dulak () gmail com>
Date: Wed, 5 Oct 2016 16:58:47 +0200

Hi,

as for
https://www.snort.org/downloads/snort/snort-2.9.8.3-1.centos7.x86_64.rpm
these two directories are versioned:

$ wget
https://www.snort.org/downloads/snort/snort-2.9.8.3-1.centos7.x86_64.rpm
$ rpm -qpl snort-2.9.8.3-1.centos7.x86_64.rpm | grep -E
'_dynamicengine$|_dynamicpreprocessor$'
/usr/lib64/snort-2.9.8.3_dynamicengine
/usr/lib64/snort-2.9.8.3_dynamicpreprocessor

This is due to the following lines in snort.spec:

%attr(0755,root,root) %dir %{_libdir}/%{realname}-%{version}_dynamicengine
%attr(0755,root,root)
%{_libdir}/%{realname}-%{version}_dynamicengine/libsf_engine.*
%attr(0755,root,root) %dir
%{_libdir}/%{realname}-%{version}_dynamicpreprocessor
%attr(0755,root,root)
%{_libdir}/%{realname}-%{version}_dynamicpreprocessor/libsf_*_preproc.*

In view of snort RPM updates it would be better to keep these directories
unversioned, like this:

%attr(0755,root,root) %dir %{_libdir}/%{realname}_dynamicengine
%attr(0755,root,root) %{_libdir}/%{realname}_dynamicengine/libsf_engine.*
%attr(0755,root,root) %dir %{_libdir}/%{realname}_dynamicpreprocessor
%attr(0755,root,root)
%{_libdir}/%{realname}_dynamicpreprocessor/libsf_*_preproc.*

That would require changing also the corresponding variables in the default
/etc/snort/snort.conf.

The motivation for the change request is as follows: /etc/snort/snort.conf
is packaged with %config(noreplace), so after a user modifies
/etc/snort/snort.conf the subsequent yum update of snort will NOT overwrite
this file, and the user will be left with incorrect
/usr/lib64/snort-2.9.8.3_dynamicpreprocessor and
/usr/lib64/snort-2.9.8.3_dynamicengine in /etc/snort/snort.conf.

There is no conflict with the future packaging of snort3 because of the
possibility of using %define realname snort3.

Cheers,

Marcin
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: