[OISF/outreachy] Help needed in Bug #2875

Shivani Bhardwaj sbhardwaj at openinfosecfoundation.org
Tue Apr 9 16:28:40 UTC 2019


On Tue, Apr 9, 2019 at 9:38 PM vagisha gupta <vagishagupta23 at gmail.com> wrote:
>
> Hey,
>
> On Mon, Apr 8, 2019 at 3:11 PM Shivani Bhardwaj <sbhardwaj at openinfosecfoundation.org> wrote:
>>
>> Hi, Vagisha!
>>
>> On Mon, Apr 8, 2019 at 1:48 PM vagisha gupta via Outreachy
>> <outreachy at lists.openinfosecfoundation.org> wrote:
>> >
>> > Hey,
>> >
>> > Just sending you a gentle reminder to look on this request.
>> >
>> Apologies for missing your email. Yes, you can start working on this.
>>
>> This error can be reproduced by running suricata-update with any
>> normal user which does not have permission to enter /var/lib.
>>
> Thanks for the help.
> I tried reproducing the bug running the below command :
> vagisha (master) suricata-update $ ./bin/suricata-update
> But, I got an error mentioned below in the link.
> https://bpaste.net/show/64f3cba67677
> I think the permission to load /usr/local/etc/suricata/suricata.yaml
> is denied.
> Should I change the permssion of this file or is there
> something else I need to do?
>
Changing the file permission won't help. Say my suricata.yaml is in
/etc/suricata and the user (shivani) I'm using to run suricata-update
is a non-root user, I'll get a similar ugly traceback. We want to
avoid those ugly tracebacks. So, check the permission of the directory
where you're loading the file from and exit cleanly with an error in
the log saying that "Permission denied: Please alter the permissions
for <dir>".

>> > On Mon 1 Apr, 2019, 1:45 AM vagisha gupta, <vagishagupta23 at gmail.com> wrote:
>> >>
>> >> Hey,
>> >>
>> >> Thanks for all the help and feedback to my previous PR's.
>> >> Since all the previous PR's are approved, can I start working on
>> >> a new issue (https://redmine.openinfosecfoundation.org/issues/2875)
>> >> if no one is working on it?
>> >> Can it be assigned to me?
>> >> If yes, could you please help in reproducing the bug?
>> >> I am unable to figure out how to run Suricata-update with the wrong user.
>> >>
>> >> Regards,
>> >> Vagisha
>> >
>> > _______________________________________________
>> > Outreachy mailing list
>> > Outreachy at lists.openinfosecfoundation.org
>> > https://lists.openinfosecfoundation.org/listinfo/outreachy
>>
>>
>>
>> --
>> Shivani
>
> Regards,
> Vagisha



-- 
Shivani


More information about the Outreachy mailing list