tor: Install and ship service related IDS rules file.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/config/rootfiles/packages/tor b/config/rootfiles/packages/tor
index c75e86f11895ba812af1b7fcfe9c0a6c6b7e50af..dcf78e73b1627e9e981f880c343d9508ec9691e1 100644 (file)
--- a/config/rootfiles/packages/tor
+++ b/config/rootfiles/packages/tor
@@ -23,6 +23,9 @@ usr/local/bin/torctrl
 #usr/share/man/man1/tor-resolve.1
 #usr/share/man/man1/tor.1
 #usr/share/man/man1/torify.1
+#usr/share/suricata
+#usr/share/suricata/rules
+usr/share/suricata/rules/ipfire-tor.rules
 usr/share/tor
 usr/share/tor/defaults-torrc
 usr/share/tor/geoip

diff --git a/lfs/tor b/lfs/tor
index 74b738512b33dc24329faa9d9816f2ad1637b186..a51615398d91a217dcf7e2090d206a956fb95106 100644 (file)
--- a/lfs/tor
+++ b/lfs/tor
@@ -111,6 +111,11 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        install -v -m 644 $(DIR_SRC)/config/tor/defaults-torrc \
                /usr/share/tor/defaults-torrc
 
+       # Additional suricata rules for this service.
+       mkdir -pv /usr/share/suricata/rules
+       install -v -m 644 $(DIR_SRC/config/tor/ipfire-tor.rules \
+               /usr/share/suricata/rules/ipfire-tor.rules
+
        # Install initscripts
        $(call INSTALL_INITSCRIPTS,$(SERVICES))