PREIN

/bin/sh

/usr/share/rpm-helper/add-user snort $1 snort /var/log/snort /bin/false

PREUN

/bin/sh

/usr/share/rpm-helper/del-service snort $1 snort

POSTIN

/bin/sh

/usr/sbin/update-alternatives --install /usr/sbin/snort snort /usr/sbin/snort-plain 10
/usr/bin/systemd-tmpfiles --create snort.conf 

/usr/share/rpm-helper/add-service snort $1 snort

POSTUN

/bin/sh

/usr/share/rpm-helper/del-user snort $1 snort 

# remove the link if not upgrade
if [ $1 = 0 ]; then
    /usr/sbin/update-alternatives --remove snort /usr/sbin/snort-plain
fi