From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Sun, 17 Dec 2017 18:10:21 +0000 (+0100)
Subject: ids.cgi: Pipe the oinkmaster output to the logger binary
X-Git-Tag: suricata-beta3~33^2~39^2~19
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a6edfcbd9b762832939209e538e31e79c0d32b65;p=people%2Fstevee%2Fipfire-2.x.git

ids.cgi: Pipe the oinkmaster output to the logger binary

This will allow anybody, to access the log of oinkmaster and
get detailed information about any changes which have been done
on the ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi
index 52a9596b6c..80ef2343e7 100644
--- a/html/cgi-bin/ids.cgi
+++ b/html/cgi-bin/ids.cgi
@@ -659,7 +659,7 @@ sub downloadruleset {
 
 sub oinkmaster () {
 	# Call oinkmaster to generate ruleset.
-	system("/usr/local/bin/oinkmaster.pl -v -s -u file:///var/tmp/snortrules.tar.gz -C /var/ipfire/snort/oinkmaster.conf -o /etc/snort/rules 2>&1 &");
+	system("/usr/local/bin/oinkmaster.pl -v -s -u file://$rulestarball -C /var/ipfire/snort/oinkmaster.conf -o /etc/snort/rules 2>&1 |logger -t oinkmaster");
 }
 
 sub readrulesfile ($) {