On Mon, 2004-08-16 at 14:09, Business DSL User wrote: > Drat! No can do: The latest kernel includes a bug that restricts my Intel > e1000 network adapter to about 20 kbps. So, I've been forced to regress to > the next to latest kernel. That may still have the change for re-opening descriptors. If not, you can always manually redirect descriptors 0-2 to /dev/null from the shell when you start snort, in which case SELinux won't close them and snort should be fine. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency