Squert - Colour error message as read only

37 views
Skip to first unread message

bug...@gmail.com

unread,
Feb 17, 2016, 1:41:36 PM2/17/16
to security-onion
Hi.

When trying to change the colour of an IP (Source or Destination) you get the following pop up error message in Squert:

INSERT,UPDATE command denied to user 'readonly'@'localhost' for table 'object_mappings'

To reproduce:
- select an event
- click on either the Source or Destination IP address
- Select a colour and click update.

This might be a limitation as to how squert runs in SO.

One thing which I liked in Snorby was the ability to map IP addresses with hostnames, so you could easily recognise certains local host when looking at alerts/events.
As I don't think you can do that in Squert, I was hoping to be able to colour code certain IP.

Bugs.

Doug Burks

unread,
Feb 17, 2016, 5:04:19 PM2/17/16
to securit...@googlegroups.com
I've confirmed this issue on new installations (installations upgraded
from 12.04 appear to work OK).

I've created the following issue to get this resolved:

Squert: object_mappings table has wrong permissions #866
https://github.com/Security-Onion-Solutions/security-onion/issues/866
> --
> Follow Security Onion on Twitter!
> https://twitter.com/securityonion
> ---
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at https://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/d/optout.



--
Doug Burks

bug...@gmail.com

unread,
Feb 18, 2016, 6:52:33 AM2/18/16
to security-onion
Thanks Doug!.
Reply all
Reply to author
Forward
0 new messages