From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Mon, 27 Aug 2018 13:11:28 +0000 (+0200)
Subject: ids-functions.pl: Early abort downloadruleset() if no ruleset is configured
X-Git-Tag: suricata-beta3~20
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=be52c68a2db2455f8118190a6bb37594891480a1;p=people%2Fstevee%2Fipfire-2.x.git

ids-functions.pl: Early abort downloadruleset() if no ruleset is configured

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl
index 28f08182af..a514d79893 100644
--- a/config/cfgroot/ids-functions.pl
+++ b/config/cfgroot/ids-functions.pl
@@ -98,6 +98,15 @@ sub downloadruleset {
 	my %snortsettings=();
 	&General::readhash("$settingsdir/settings", \%snortsettings);
 
+	# Check if a ruleset has been configured.
+	unless($snortsettings{'RULES'}) {
+		# Log that no ruleset has been configured and abort.
+		&_log_to_syslog("No ruleset source has been configured.");
+
+		# Return "1".
+		return 1;
+	}
+
 	# Get all available ruleset locations.
 	my %rulesetsources=();
 	&General::readhash($rulesetsourcesfile, \%rulesetsources);