Bug 142257 – net-analyzer/snort init script should use mysql/postgresql

• Status: RESOLVED TEST-REQUEST
• Product: Gentoo Linux

[Description Toralf Förster 2006-07-31 02:42:56 UTC]

If snort is configured to log into mysql and the database isn't up, an "$ /etc/init.d/snort status" returens "started" although snort isn't up and running.

[Comment 1 Toralf Förster 2006-07-31 02:43:37 UTC]

n22 /var/www/localhost/htdocs/public # emerge --info
Portage 2.1-r1 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r4, 2.6.17-gentoo-r4 i686)
=================================================================
System uname: 2.6.17-gentoo-r4 i686 Intel(R) Pentium(R) M processor 1700MHz
Gentoo Base System version 1.6.15
ccache version 2.3 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=pentium-m -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks metadata-transfer parallel-fetch sandbox sfperms strict"
GENTOO_MIRRORS="ftp://mirror.icis.pcz.pl/gentoo/ http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ ftp://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/"
LINGUAS="de en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 X aac acpi alsa apache2 arts asf avi berkdb bitmap-fonts bzip2 clamav cli crypt css cups dlloader dri dvd emboss encode exif fam fastbuild ffmpeg foomaticdb fortran gd gdbm gif gpm gstreamer gtk gtk2 imlib ipv6 isdnlog jai java javascript jimi joystick jpeg kde libg++ libwww live logrotate mad mbox mikmod mmx mmxext motif mozsvg mp3 mpeg mysql ncurses nls nptl nsplugin ogg opengl oss pam pcre pdf pdflib perl png pppd python qt qt3 qt4 quicktime readline real reflection rtc rtsp samba sdl session slp snmp spell spl sse sse2 ssl subversion svg tcltk tcpd theora tiff truetype truetype-fonts type1-fonts udev unicode userlocales vorbis win32codecs xanim xml xorg xv xvid zlib elibc_glibc input_devices_keyboard input_devices_mouse kernel_linux linguas_de linguas_en userland_GNU video_cards_vga video_cards_radeon"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 2 Jakub Moc (RETIRED) 2006-07-31 02:56:22 UTC]

I assume same is valid for PostgreSQL, the init script should use those services when emerged w/ respective use flags.

[Comment 3 Toralf Förster 2006-07-31 03:43:33 UTC]

(In reply to comment #2)
> I assume same is valid for PostgreSQL, the init script should use those
> services when emerged w/ respective use flags.
> 

Right, but changing the snort logging behaviour (using database instead of files) some days after installation yields into the same situation, so the ebuild alone cannot handle this case, or ?

[Comment 4 Cédric Krier 2006-11-25 08:42:19 UTC]

Add after depend for version 2.6.1.1