Hi,

Would it be better to run the snort daemon in a chroot directory (like /var/chroot/snort or something) instead of its default (/nonexistent) via the -t flag in the rc.d script? Or at least have the option with a snort_chrootdir=""? I read about this option in the man page and was wondering if it was available, desirable, and / or unnecessary.

Thanks,

!tr