Re: Permission denied

Robin Gruyters <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
On Thu, Oct 18, 2007 at 12:48:47PM +0200, Yoann Vandoorselaere wrote:
> Hi Robin,
> 
> Le mercredi 17 octobre 2007 ?? 14:19 +0200, Robin Gruyters a ??crit :
> > I've just installed the latest libprelude on our test environment and after
> > I have registered a new sensor, and trying to start Snort daemon, I got the
> > following message:
> > 
> > {{{
> > ERROR: prelude-failover: Unable to initialize prelude client: error opening '/var/spool/prelude/snort/global/data0': Permission denied.
> > }}}
> > 
> > When I check the permissions of the /var/spool/prelude/snort directory, I
> > see it has been created with the following permissions:
> > 
> > drw-r-x---  4 snort  snort  512 Oct 17 13:50 /var/spool/prelude/snort/global
> 
> This problem occurred in combination with certain system umask. I just
> fixed libprelude so that it correctly set the umask before file
> creation. You might try to apply:
> 
> https://trac.prelude-ids.org/changeset/9991
> https://trac.prelude-ids.org/changeset/9992
> 
> To see if they fixes your issue.
> 
Hello,

I have just installed the patches and looks like it is working now.

{{{
$ ls -ld /var/spool/prelude/prelude-lml
drwxrwx---  4 root  wheel  512 Oct 23 10:27 /var/spool/prelude/prelude-lml
$ ls -l /var/spool/prelude/prelude-lml
total 4
drwxrwx---  2 root  wheel  512 Oct 23 10:27 _tmp_prelude-manager.sock
drwxrwx---  2 root  wheel  512 Oct 23 10:27 global
$
}}}

Kind regards,

-- 
Robin Gruyters
Network and Security Engineer
YIRDIS - Betronic Services
I: http://yirdis.com
I: http://betronic.nl
P: +31 (0)20 5659191
F: +31 (0)20 5659190

_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel
signature.asc (application/pgp-signature, 187 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (FreeBSD)

iD8DBQFHHbGkLh3hlgHmc7MRAucxAKC7ut8mCrqcjRmn2Z72+JAVedjbtACfUxl2
mgEisKkTcHo4TAmDjx6RWDs=
=dk/4
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.