[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Snort config



On Fri, 18 May 2001, Iwan Mouwen wrote:

> * John Galt <galt@inconnu.isu.edu> [010516 15:24]:
> > >DEBIAN_SNORT_STATS_RCPT="root"
> >                           ^^^^^
> > Change this just on principle: using root to check system email is just
> > another thing you can do as a user and not have to be logged in as root so
> > much...
> > 
> 
> Why?
> 
> # vi /etc/aliases
> root: <yournamehere>

   Agreed. IMHO, this is the right way to do things. Send all
maintainance and administrative email to root and set
/etc/(sendmail/)aliases accordingly.
   Then if the administrator changes from foo to bar, you only have one
file to change.

   The exception would be if you have multiple administrators for the
same machine, each responsible for a subset of the functions. Then I
would send email to account-admin, web-admin, sys-admin, etc, and,
again, point these to the appropriate physical person in the aliases
file.

--
Francois Gouget         fgouget@free.fr        http://fgouget.free.fr/
               RFC 2549: ftp://ftp.isi.edu/in-notes/rfc2549.txt
                IP over Avian Carriers with Quality of Service



Reply to: