[Bro-Dev] Script reorg proposal

Adam J. Slagell slagell at ncsa.illinois.edu
Mon Aug 1 12:22:49 PDT 2011

On Aug 1, 2011, at 2:19 PM, Matthias Vallentin wrote:

> I like this rather simple scheme.
>>    /usr/share/bro/site/
>>        - Local site-policies. Depending on file system standards,
>>        this may go somehwere else as well.
> It always bothered me that the site scripts were in the same place as
> the distribution policy scripts. This made it more difficult to keep
> local customixations in git or other VCS. What about ~/.bro/site? (see
> below)

Does this make an implicit assumption that only one user is configuring the Bro policy for a site or system? Or does bro run as root and hence this would almost always be in /root/.bro ?

Adam J. Slagell, CISSP
Sr. Security Engineer
National Center for Supercomputing Applications
University of Illinois at Urbana-Champaign

More information about the bro-dev mailing list