Would it be possible to package this in a way that doesn't require running as the root user? The current packaging creates a significant security risk for the entire system.
https://docs.suricata.io/en/suricata-6.0.14/security.html Requires a bit tuning, but works fine. Eero
