if ($run_snort_locally){
$snort_binary_path = &binary_search($conf{'snort_binary'},"snort");
- $snort_conf_file = $opts{'c'} || &get_config_value("snort_conf_file") || "/usr/local/demarc/conf/snort.conf";
-+ $snort_conf_file = $opts{'c'} || &get_config_value("snort_conf_file") || "/var/state/demarcd/snort.conf";
++ $snort_conf_file = $opts{'c'} || &get_config_value("snort_conf_file") || "/var/lib/demarcd/snort.conf";
$snort_options = &get_config_value("snort_options") || " -o -D -q ";#Special options for snort
}
-snort_binary_path = "/usr/local/bin/snort"
-snort_conf_file = "/usr/local/demarc/conf/snort.conf"
+snort_binary_path = "/usr/sbin/snort"
-+snort_conf_file = "/var/state/demarcd/snort.conf"
++snort_conf_file = "/var/lib/demarcd/snort.conf"
# If you have multiple interfaces and want to have snort monitor ONLY one of them,
# name the interface you wish to monitor below (ie "eth0")
install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,cron.d,demarcd,httpd}
install -d $RPM_BUILD_ROOT%{_sbindir}
install -d $RPM_BUILD_ROOT%{_datadir}/demarc/{images,cgi}
-install -d $RPM_BUILD_ROOT/var/state/demarcd
+install -d $RPM_BUILD_ROOT/%{_var}/lib/demarcd
install %{SOURCE1} $RPM_BUILD_ROOT/etc/httpd/%{name}.conf
install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/demarcd
%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/demarcd/*.conf
%attr(750,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/demarcd/*.cmds
%attr(640,root,root) %config /etc/cron.d/%{name}
-%attr(750,root,root) /var/state/demarcd
+%attr(750,root,root) %{_var}/lib/demarcd