#usr/share/suricata/threshold.config
var/cache/suricata
var/cache/suricata/sgh
-var/ipfire/suricata/reporter.conf
var/lib/suricata
#var/lib/suricata/cache
#var/lib/suricata/cache/sgh
usr/share/locale/de_DE
usr/share/locale/de_DE/LC_MESSAGES
usr/share/locale/de_DE/LC_MESSAGES/suricata-reporter.mo
+var/ipfire/suricata/reporter.conf
+++ /dev/null
-;
-; Example configuration file for the Suricata Reporter
-;
-; This application receives events from Suricata to generate reports,
-; alert emails and store a history of alerts.
-;
-[DEFAULT]
-; The number of worker processes to spawn.
-; Default is to launch one worker per CPU core.
-;workers = 4
-
-; The socket where to receive events from
-;socket = /var/run/suricata/reporter.socket
-
-; The ownership of the socket
-;user = suricata
-;group = suricata
-
-; The path to the database
-;database = /var/log/suricata/reporter.db
-
-[syslog]
-; Enable sending any alerts to syslog in the human-reable fast.log format
-;enabled = true
-
-[email]
-; Enable sending an alert email for each alert
-;enabled = true
-
-; The sender email address
-;sender = no-reply@ipfire.org
-
-; The recipient email addresses. Use comma separation for more reciepients.
-;recipients = john.doe@example.com, jane.doe@example.com
# Install the reporter
install -v -m 755 $(DIR_SRC)/config/suricata/suricata-reporter /usr/bin/suricata-reporter
- install -v -m 644 $(DIR_SRC)/config/suricata/reporter.conf \
- /var/ipfire/suricata/reporter.conf
- chown -v nobody:nobody /var/ipfire/suricata/reporter.conf
# Install the cron script
install -v -m 755 $(DIR_SRC)/config/suricata/suricata-report-cron \
--sysconfdir=/etc
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
+
+ # Move the configuration file so that it can be edited by the user
+ # and will be included in the backup
+ mv -v /etc/suricata/reporter.conf \
+ /var/ipfire/suricata/reporter.conf
+ ln -svf --relative \
+ /var/ipfire/suricata/reporter.conf \
+ /etc/suricata/reporter.conf
+ chown nobody:nobody /var/ipfire/suricata/reporter.conf
+
@rm -rf $(DIR_APP)
@$(POSTBUILD)