Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 34150 - flexresp should be optional in snort ebuilds
Summary: flexresp should be optional in snort ebuilds
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Michael Boman (RETIRED)
Depends on:
Reported: 2003-11-22 19:17 UTC by Martin Jackson (RETIRED)
Modified: 2003-11-28 00:03 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Martin Jackson (RETIRED) gentoo-dev 2003-11-22 19:17:26 UTC
flexresp support via libnet should be optional (a use flag might be overkill;
perhaps a libnet use flag would be more appropriate)?

With libnet-1.1 merged, merging snort-2.0.0 fails due to snort not liking that
version of libnet

Reproducible: Always
Steps to Reproduce:
Comment 1 Michael Boman (RETIRED) gentoo-dev 2003-11-24 04:54:54 UTC
I wonder if the whole flexresp functionaility shouldn't be dropped as whole actually. It gives the user of the software a false "snort will protect me from bad guys" sense of security, while providing zero protection in the default setup (and most people actually do run default setups) and limited functionallity when it is in use.

Anyway, if you think it's still a good idea to keep flexresp support in Snort I'll add the local USE flag to the ebuild.

I'd like to hear what you guys think of this.
Comment 2 Martin Jackson (RETIRED) gentoo-dev 2003-11-24 16:18:28 UTC
I wasn't planning on actually using flexresp - if you want to be a black hole (which I do), just about the worst thing you can do is start sending ICMP unreachables or whatever when a hostile scanner passes by.

I suppose it would be easy enough for someone with proper motivation to put the --enable-flexresp line back into the ebuild if it came out completely...
Comment 3 Michael Boman (RETIRED) gentoo-dev 2003-11-27 20:17:05 UTC
I am preparing a updated ebuild that disables flexresp by default unless a (local) "flexresp" USE flag has been specified.

If you have anything against this please voice out now.
Comment 4 Michael Boman (RETIRED) gentoo-dev 2003-11-28 00:03:39 UTC
Ok, commited snort-2.0.5-r1:

  - Made flexresp optional (controlled by "flexresp" local USE flag)
  - Made smbalert optional (controlled by "samba" USE flag).
  - Threading support was never officially supported in Snort, and has
    been removed from ebuild now as the code is, if not already has been,
    cleaned from the source tree.
  - Updated prelude patch.
  - Assigned myself as the primary maintainer of this ebuild, with the
    hardened as the herd.