Uninstalling the Snare for Linux package is relatively straightforward.
To remove the Snare for Linux binary RPM package:
- Query the RPM database to ensure Snare for Linux is installed:
>rpm -q snarelinux-supp
- Then remove the Snare for Linux RPM package:
>rpm -e snarelinux-supp
To remove the Snare for Linux binary DEB package:
- To query the DEB package:
>dpkg --list snarelinux-supp
- To remove the DEB package:
>dpkg -r snarelinux-supp
The Snare files in /etc/audit will be renamed and backed up, e.g snare.conf-snarebackup.