[Bro] does bro need root privilege?

[Kenneth Goldman]

Daniel Thayer <dnthayer at illinois.edu> wrote on 05/22/2017 04:47:08 PM:

> From: Daniel Thayer <dnthayer at illinois.edu>
> To: Kenneth Goldman <kgoldman at us.ibm.com>, <bro at bro.org>
> Date: 05/22/2017 04:47 PM
> Subject: Re: [Bro] does bro need root privilege?
> 
> The BroControl documentation explains how to run as a normal user:
> https://www.bro.org/sphinx/components/broctl/README.html#using-
> brocontrol-as-an-unprivileged-user

The spool and logs directories are in my home directory, and I edited 
/etc/bro/broctl.cfg to point to them.  They are rwx.

SpoolDir = /home/kgold/bro/spool
LogDir = /home/kgold/bro/logs

I'm still getting this error:

> > [BroControl] > install
> > Error: running "bro -v" failed with output:
> > can't open 'debug.log' for debugging output

Perhaps I'm editing the wrong configuration file and it's still
trying to open debug.log in a different directory?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170523/b61d0ec1/attachment.html