Emerging snort will create a user "snort" and a snort dir under /var/log This dir is owned by root and user snort cannot create anything inside Reproducible: Always Steps to Reproduce: 1. 2. 3.
fixed in 2.3.0_rc2 and all version of snort that I can see. $ fgrep /var/log * ChangeLog: /var/log/snort now has a .keep in it. Closes bug #7271 by snort-2.0.6.ebuild: dodir /var/log/snort snort-2.0.6.ebuild: keepdir /var/log/snort/ snort-2.0.6.ebuild: enewuser snort -1 /dev/null /var/log/snort snort snort-2.0.6.ebuild: usermod -d "/var/log/snort" snort || die "usermod problem" snort-2.0.6.ebuild: chown snort:snort /var/log/snort snort-2.0.6.ebuild: chmod 0770 /var/log/snort snort-2.1.3.ebuild: enewuser snort -1 /dev/null /var/log/snort snort snort-2.1.3.ebuild: usermod -d "/var/log/snort" snort || die "usermod problem" snort-2.1.3.ebuild: dodir /var/log/snort snort-2.1.3.ebuild: keepdir /var/log/snort/ snort-2.1.3.ebuild: chown snort:snort ${D}/var/log/snort snort-2.1.3.ebuild: chmod 0770 ${D}/var/log/snort snort-2.2.0.ebuild: enewuser snort -1 /dev/null /var/log/snort snort snort-2.2.0.ebuild: usermod -d "/var/log/snort" snort || die "usermod problem" snort-2.2.0.ebuild: dodir /var/log/snort snort-2.2.0.ebuild: keepdir /var/log/snort/ snort-2.2.0.ebuild: chown snort:snort ${D}/var/log/snort snort-2.2.0.ebuild: chmod 0770 ${D}/var/log/snort snort-2.3.0_rc2.ebuild: enewuser snort -1 /dev/null /var/log/snort snort snort-2.3.0_rc2.ebuild: usermod -d "/var/log/snort" snort || die "usermod problem" snort-2.3.0_rc2.ebuild: keepdir /var/log/snort/ snort-2.3.0_rc2.ebuild: chown snort:snort ${D}/var/log/snort snort-2.3.0_rc2.ebuild: chmod 0770 ${D}/var/log/snort
*** Bug 91673 has been marked as a duplicate of this bug. ***