From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Fri, 24 Aug 2018 12:54:34 +0000 (+0200)
Subject: suricatactrl: Add fix-rules-dir command
X-Git-Tag: v2.23-core131~117^2~165
X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff_plain;h=68123effb80c3509cb4855c46d3ff378ba7f13a0

suricatactrl: Add fix-rules-dir command

This command is used to set the ownership and permissions
back to nobody:nobdoy which is used by the WUI to write the
ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/src/misc-progs/suricatactrl.c b/src/misc-progs/suricatactrl.c
index a084d4178c..61b76273da 100644
--- a/src/misc-progs/suricatactrl.c
+++ b/src/misc-progs/suricatactrl.c
@@ -19,7 +19,7 @@ int main(int argc, char *argv[]) {
 		exit(1);
 
 	if (argc < 2) {
-		fprintf(stderr, "\nNo argument given.\n\nidsctrl (start|stop|restart)\n\n");
+		fprintf(stderr, "\nNo argument given.\n\nsuricatactrl (start|stop|restart|reload)\n\n");
 		exit(1);
 	}
 
@@ -31,8 +31,10 @@ int main(int argc, char *argv[]) {
 		safe_system("/etc/rc.d/init.d/suricata restart");
 	} else if (strcmp(argv[1], "reload") == 0) {
 		safe_system("/etc/rc.d/init.d/suricata reload");
+	} else if (strcmp(argv[1], "fix-rules-dir") == 0) {
+		safe_system("chown nobody:nobody /etc/suricata/rules/*");
 	} else {
-		fprintf(stderr, "\nBad argument given.\n\nsnortctrl (start|stop|restart|reload)\n\n");
+		fprintf(stderr, "\nBad argument given.\n\nsuricatactrl (start|stop|restart|reload)\n\n");
 		exit(1);
 	}