From: Peter Müller <peter.mueller@ipfire.org>
Date: Thu, 11 May 2023 20:02:12 +0000 (+0000)
Subject: Core Update 175: Ship and restart Suricata
X-Git-Tag: v2.27-core175~88
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a475adc183212b07fca5808e43e035c041df7d74;p=ipfire-2.x.git

Core Update 175: Ship and restart Suricata

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---

diff --git a/config/rootfiles/core/175/filelists/suricata b/config/rootfiles/core/175/filelists/suricata
new file mode 120000
index 0000000000..f671f69933
--- /dev/null
+++ b/config/rootfiles/core/175/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
diff --git a/config/rootfiles/core/175/update.sh b/config/rootfiles/core/175/update.sh
index 7615a52b02..2c106f69ef 100644
--- a/config/rootfiles/core/175/update.sh
+++ b/config/rootfiles/core/175/update.sh
@@ -48,6 +48,7 @@ done
 /etc/rc.d/init.d/ntp stop
 /etc/rc.d/init.d/sshd stop
 /etc/rc.d/init.d/unbound stop
+/etc/rc.d/init.d/suricata stop
 
 KVER="xxxKVERxxx"
 
@@ -134,6 +135,9 @@ chmod -v 644 /var/log/pakfire.log
 /etc/rc.d/init.d/firewall restart
 
 # Start services
+if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then
+	/etc/rc.d/init.d/suricata start
+fi
 /etc/rc.d/init.d/unbound start
 /etc/rc.d/init.d/apache start
 /etc/rc.d/init.d/ntp start