'snort' user account question

[zarated]

Hi

I would prefer not to SSH into the boxes using the root account, so I took a look at
the /etc/passwd file to see what other users you've created.

I noticed there is the 'snort' account who is the owner of files under /etc/snort.

As opposed to creating a new account strictly for this purpose of SSH'ng and making changes,
using this 'snort' account would be more convenient because then I would not have to worry about setting permissions.

Which brings me to my question:

I don't know the password for this 'snort' account, if I reset its password, give it a shell during login, and
include it in /etc/sudoers -- will this break (or cause a conflict with) anything in your EasyIDS implementation?

Thanks! I hope to be as good in linux as you someday!

[oakleeman]

Good question. I'll test it out this weekend and see what happens.