snort fails to remove pid file on shutdown

Bug #1006982 reported by Nathan
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snort (Debian)
Fix Released
Unknown
snort (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

When the snort service is stopping, snort complains that it can't remove its pid file:

snort[32238]: Could not remove pid file /var/run//snort_eth0.pid: Permission denied

This is due to the snort user not having write permissions on /var/run. One fix is at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=462423, where they change the code to not complain when it can't remove the pid file. Alternatively, I patched the init script to put the pid file in /var/run/snort and gave the snort user ownership of that directory. Diffs are attached.

Tags: patch
Revision history for this message
Nathan (nmickuli) wrote :
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "diffs for snort init scripts" of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

tags: added: patch
Changed in snort (Debian):
status: Unknown → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package snort - 2.9.15.1-2

---------------
snort (2.9.15.1-2) unstable; urgency=medium

  * debian/control:
     - Add libssl-dev as Build-Dep (Closes:#956812)
     - Update Standards version
     - Fix Git-VCS url
     - Make snort-doc Multi-Arch: foreign
  * debian/patches/documentation_debian: Document the use of /etc/default/snort

 -- Javier Fernández-Sanguino Peña <email address hidden> Sat, 18 Apr 2020 11:56:13 +0200

Changed in snort (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.