]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
Stefan Schantl [Sat, 11 Aug 2018 20:10:29 +0000 (22:10 +0200)]
ids-functions.pl: Add function to call suricatactrl binary
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Sat, 11 Aug 2018 12:45:56 +0000 (14:45 +0200)]
intel-microcode: update to
20180807
fixes #11590
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Sat, 11 Aug 2018 17:50:20 +0000 (19:50 +0200)]
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Fri, 10 Aug 2018 11:20:38 +0000 (12:20 +0100)]
avahi: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 10 Aug 2018 11:20:06 +0000 (12:20 +0100)]
avahi: Build without dbus
We don't have any services connected to dbus, so what is the
point of avahi trying to connect to it?
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 10 Aug 2018 11:18:29 +0000 (12:18 +0100)]
avahi: Build with -U_FORTIFY_SOURCE
Avahi locks up when built with -D_FORTIFY_SOURCE=2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 10 Aug 2018 10:19:25 +0000 (11:19 +0100)]
avahi: Update to 0.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Fri, 10 Aug 2018 10:08:09 +0000 (11:08 +0100)]
Revert "avahi: Drop package"
This reverts commit
aa6ee515c59cd42b12d69981329a2438e4d6e933 .
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Thu, 9 Aug 2018 15:28:14 +0000 (16:28 +0100)]
openssh: Disable password authentication by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Thu, 9 Aug 2018 13:33:25 +0000 (15:33 +0200)]
ids.cgi: Dynamically generate the HOME_NET details for suricata.
Introduce generate_home_net_file() which uses the current network
config to obtain the network address and subnetmask for each
available network zone, generate and write these HOME_NET information
into a yaml compatible file which can be included into the suricata
configuration file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Wed, 8 Aug 2018 08:26:38 +0000 (10:26 +0200)]
kernel: fix build on x86_64
oops i deleted a wrong line...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Tue, 7 Aug 2018 17:05:35 +0000 (19:05 +0200)]
kernel: fix build on armv5tel
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Sun, 5 Aug 2018 17:42:33 +0000 (19:42 +0200)]
ids.cgi: Rename form name from SNORT to IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Sun, 5 Aug 2018 15:19:52 +0000 (17:19 +0200)]
kernel: apu2 leds: update string for newer bios
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Arne Fitzenreiter [Sun, 5 Aug 2018 15:19:36 +0000 (17:19 +0200)]
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Stefan Schantl [Sun, 5 Aug 2018 12:24:20 +0000 (14:24 +0200)]
ids.cgi: Display if the IDS is running
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 5 Aug 2018 12:23:45 +0000 (14:23 +0200)]
ids-functions.pl: Add function to check if the IDS is running
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Sun, 5 Aug 2018 11:32:36 +0000 (13:32 +0200)]
initrd: add early microcode load
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Sun, 5 Aug 2018 10:57:44 +0000 (12:57 +0200)]
ids.cgi: Rework section to configure the IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Erik Kapfer [Sat, 4 Aug 2018 11:52:32 +0000 (13:52 +0200)]
tor: Update to version 0.3.3.9
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Erik Kapfer [Sat, 4 Aug 2018 11:49:00 +0000 (13:49 +0200)]
nginx: Update to version 1.15.1
Deleted last slash in --prefix configure option to prevent such -->
https://forum.ipfire.org/viewtopic.php?t=19213#p109787 problems.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Sat, 4 Aug 2018 06:35:05 +0000 (08:35 +0200)]
rng-tools: Update to 6.3.1
Bugfix release, for details see:
https://github.com/nhorman/rng-tools/releases
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Michael Tremer [Sat, 4 Aug 2018 12:39:00 +0000 (13:39 +0100)]
make.sh: Add command to update list of contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Sat, 4 Aug 2018 14:48:27 +0000 (16:48 +0200)]
ids-functions.pl: Add function to get the available network zones
The get_available_network_zones() function uses the /var/ipfire/ethernet/settings
file and translates the configured mode into an array, which contains the names
of the configured network zones.
The array will be returned and easily can be used to loop over this list of
available network zones and perform any kind of actions in other scripts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Fri, 3 Aug 2018 14:13:12 +0000 (16:13 +0200)]
collectd: fix cpufreq plugin enable
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Michael Tremer [Tue, 31 Jul 2018 15:23:07 +0000 (16:23 +0100)]
backup: Bump release number in ISO download script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 11:51:59 +0000 (13:51 +0200)]
ids.cgi: Call suricatactrl for restarting the IDS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 11:48:46 +0000 (13:48 +0200)]
oinkmaster: Install config file to /var/ipfire/suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 08:20:18 +0000 (10:20 +0200)]
daq: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 08:19:35 +0000 (10:19 +0200)]
snort: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 08:02:34 +0000 (10:02 +0200)]
initscripts: Link against suricata initscript in runlevels and red.up hook
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 3 Aug 2018 07:50:31 +0000 (09:50 +0200)]
misc-progs: Rename snortctrl to suricatactrl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Arne Fitzenreiter [Thu, 2 Aug 2018 19:15:11 +0000 (21:15 +0200)]
linux-firmware: update to 30.7.2018
include new amd microcodes for Spectre updates
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 17:58:41 +0000 (19:58 +0200)]
make.sh: Add ids-ruleset-source
I accidently forgot to commit this file in
1d9b87914053e54550c6f2a76377a8001bbf1da6
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 17:54:22 +0000 (19:54 +0200)]
suricata: Introduce basic initscript
Add a very basic initscript, which currently allows to start/stop/restart suricata and
check if the daemon is running.
The script will detect when starting suricata how many CPU cores are present on the system and
will launch suricata in inline mode (NFQUEUE) and listen to as much queues as CPU cores are
detected.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 17:33:37 +0000 (19:33 +0200)]
ids-ruleset-sources: Update download URL for snort rules
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 17:31:52 +0000 (19:31 +0200)]
ids-functions.pl: Rename ruleset-sources.list to ruleset-sources
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 17:29:36 +0000 (19:29 +0200)]
ids-ruleset-sources: New package
Move the file which contains the download URL's for the IDS rulesets
into an own common package. This will allow us in future to easily ship
a changed file with a core update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 13:47:31 +0000 (15:47 +0200)]
configroot: Move from snort to suricata
Create /var/ipfire/suricata and /var/ipfire/suricata/settings instead of
/var/ipfire/snort and /var/ipfire/snort/settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 07:10:25 +0000 (09:10 +0200)]
suricata: Install very basic config file
This config file is mostly based on the example configuration shipped
by the suricata project and needs to be enhanched.
See #11808.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 2 Aug 2018 07:07:12 +0000 (09:07 +0200)]
ids.cgi: Generate suricata compatiple used-rulefiles file
* Rename filename to suricata-used-rulefiles.yaml
* Adjust file generation as a yaml file to be compatible with suricata
* Adjust code to correctly read-in and parse the changed file
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Tue, 31 Jul 2018 15:36:09 +0000 (16:36 +0100)]
backup: Make backup ISO bootable on EFI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Mon, 30 Jul 2018 19:36:07 +0000 (21:36 +0200)]
ids-functions.pl: Move path details from snort to suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 30 Jul 2018 19:33:25 +0000 (21:33 +0200)]
Merge branch 'next-new-ids.cgi' into next-suricata-and-cgi
Stefan Schantl [Mon, 23 Jul 2018 18:21:38 +0000 (20:21 +0200)]
suricata: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Mon, 30 Jul 2018 15:54:50 +0000 (16:54 +0100)]
aws: Disable SSH password authentication by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Mon, 23 Jul 2018 18:20:29 +0000 (20:20 +0200)]
libhtp: New package
This is build and runtime dependency for suricata.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 23 Jul 2018 18:19:19 +0000 (20:19 +0200)]
yaml: New package
This is a build and runtime dependency for suricata.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 28 Jul 2018 14:34:50 +0000 (16:34 +0200)]
IDS: Rework error and log handling in ids-functions.pl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Fri, 27 Jul 2018 05:58:23 +0000 (07:58 +0200)]
IDS: Introduce settingsdir variable
The $settingsdir variable is declared in the ids-functions.pl and used to to
store the path where the various files which contains the settings for the IDS and
oinkmaster is located.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 26 Jul 2018 13:56:47 +0000 (15:56 +0200)]
IDS: Move rulepath declaration to ids-functions.pl
This will help if the path ever changed. Also remove hard coded rulepath
from oinkmaster call.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 26 Jul 2018 13:51:15 +0000 (15:51 +0200)]
ids.cgi: Rename snortrules hash to idsrules.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Thu, 26 Jul 2018 13:46:53 +0000 (14:46 +0100)]
core123: Ship and restart squid and apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Matthias Fischer [Tue, 17 Jul 2018 18:50:41 +0000 (20:50 +0200)]
squid: Update to 3.5.28
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Wolfgang Apolinarski [Tue, 17 Jul 2018 18:13:30 +0000 (20:13 +0200)]
Apache: Update to 2.4.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 13:08:29 +0000 (14:08 +0100)]
ids.cgi: Drop code which is detecting if oinkmaster is running
This code is not longer required and therefore can be dropped.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 13:03:08 +0000 (14:03 +0100)]
ids.cgi: Reimplement function to lock page and show working notice
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 13:01:50 +0000 (14:01 +0100)]
ids-functions.pl: Also log errors to syslog
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 13:00:57 +0000 (14:00 +0100)]
ids-functions.pl: Use pure perl to log oinkmaster result to syslog
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 11:14:06 +0000 (12:14 +0100)]
ids-functions.pl: Make variables globally accessible
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 09:20:23 +0000 (10:20 +0100)]
ids.cgi: Rework CGI logic to download a new ruleset
* Drop function to show a notice about snort is working.
* Introduce the log_error function which is responsible for log any
error messages. Currently it writes it to a tempory file, which will
be read by the WUI, the message will be displayed and the temporary file
will be released again.
* Introduce a tiny function to easily perform a reload of the generated
webpage.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 09:15:39 +0000 (10:15 +0100)]
ids.cgi: Use tarball information from ids-functions.pl
Directly use the value from the ids-functions.pl for the
location and filename of the tarball which includes the snort ruleset.
This will save to declare this information twice and prevents from any
failures if the location of filname every changes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 08:00:03 +0000 (09:00 +0100)]
ids.cgi: Drop dirty hook for updating the ruleset
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 07:58:18 +0000 (08:58 +0100)]
ids.cgi: Move function to call oinkmaster to ids-functions.pl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 07:52:21 +0000 (08:52 +0100)]
ids.cgi: Move downloader code to ids-functions.pl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 07:20:50 +0000 (08:20 +0100)]
ids.cgi: Use ids-functions.pl for checking available discspace
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 14 Feb 2018 07:18:15 +0000 (08:18 +0100)]
IDS: Introduce ids-functions.pl.
This library will contain a set of functions used by the IDS CGI script
and the planned update script for auto-updating the snort ruleset.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 12 Feb 2018 14:38:25 +0000 (15:38 +0100)]
ids.cgi: Drop loading of File::Copy module.
This is not required, at any time by the script.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 19 Dec 2017 10:57:19 +0000 (11:57 +0100)]
logs.cgi/log.dat: Add support for oinkmaster
This will allow to display the logged output of oinkmaster
via the webinterface.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 19 Dec 2017 10:56:04 +0000 (11:56 +0100)]
ids.cgi: Rework snort configuration area
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 17 Dec 2017 18:10:21 +0000 (19:10 +0100)]
ids.cgi: Pipe the oinkmaster output to the logger binary
This will allow anybody, to access the log of oinkmaster and
get detailed information about any changes which have been done
on the ruleset.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 17 Dec 2017 18:08:25 +0000 (19:08 +0100)]
ids.cgi: Rework downloader for rulesets
Doing the rules download in pure perl instead of using
the external wget.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Thu, 14 Dec 2017 07:31:41 +0000 (08:31 +0100)]
ids.cgi: Drop old control code
The control file are not longer required, because the
initscript uses the settings file to determine if snort
should be started and binded to which interfaches.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 14:06:42 +0000 (15:06 +0100)]
snort: Introduce ruleset-sources.list
This file contains the ruleset vendors and download urls and
will be used by the ids.cgi.
If an url or filename changes, we easily can adjust this file. In most
cases this will be needed when performing a snort update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 13:53:51 +0000 (14:53 +0100)]
general-functions.pl: readhash() Add code to handle optional comments in files
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 13:50:12 +0000 (14:50 +0100)]
ids.cgi: Call oinkmaster without a log target
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 13:45:27 +0000 (14:45 +0100)]
ids.cgi: Introduce ruleset-source.list
This new file will contain the vendor information and url
for downloading their ruleset. In future if the download location
or filename changes, we only need to adjust this one file and ship
it via a core update.
Also extend the downloadrulesfile to be able to directly call the
subfunction.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 13:40:47 +0000 (14:40 +0100)]
ids.cgi: Adjust code for saving snort settings
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 10:53:44 +0000 (11:53 +0100)]
ids.cgi: Remove logfile after wget has successfully downloaded the ruleset
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 10:51:08 +0000 (11:51 +0100)]
ids.cgi: Rework code which shows if oinkmaster is working
Move the code for displaying a notice that snort currently is working
into an own subfunction which will be called if oinkmaster currently
is started.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 10:50:01 +0000 (11:50 +0100)]
ids.cgi: Drop old code for debuging purposes
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 13 Dec 2017 10:46:40 +0000 (11:46 +0100)]
ids.cgi: Add check when altering the ruleset
Add a check if the currently processing sid is nummeric, otherwise skip it.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:24:50 +0000 (20:24 +0100)]
ids.cgi: Rework code for downloading/updating the ruleset
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:24:11 +0000 (20:24 +0100)]
ids.cgi: Move call of oinkmaster to an own subfunction
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:16:26 +0000 (20:16 +0100)]
ids.cgi: Always write config files for enabled/disabled rule files
If a single sid has been activated and then disabled without doing
any other ruleset modifications only one of the oinkmaster files
for enabled / disabled rules has been modified.
In this case it was possible, that the same sid, was part of the
file for enabled rules and part of the file for disabled rules at the
same time.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:15:00 +0000 (20:15 +0100)]
ids.cgi: Process enabled rulefiles in an own loop
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:12:38 +0000 (20:12 +0100)]
ids.cgi: Drop enabled/disabled rules from cgiparams hash
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Tue, 12 Dec 2017 19:10:17 +0000 (20:10 +0100)]
ids.cgi: Drop enabled rulefile from cgiparams hash after processing
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 11 Dec 2017 13:22:07 +0000 (14:22 +0100)]
ids.cgi: Re-add code for enable/disable rulefiles
The enabled rulefiles (rule categories) now will be added
to an own file, which will be included by the snort main config
file.
This will allow us to update snort and push the new main config file
without loosing the activated rulesets anymore.
* Introducing snort-used-rulefiles.conf
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 11 Dec 2017 07:46:18 +0000 (08:46 +0100)]
ids.cgi: Code cleanup
* Drop a lot of unused variables and code.
* Re-ordering some code parts.
* Add a lot of comments.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Mon, 11 Dec 2017 07:33:36 +0000 (08:33 +0100)]
ids.cgi: Re-add code to save the ruleset.
The manually enabled or disabled rules by the user now will be written
to own config files, which will be used by oinkmaster to keep these rules
in the same state after a rules update has been performed.
In short words, if you adjust your ruleset, the changes will not be lost
again if you perform an update of your ruleset.
* Grabbing and storing the cgi values now in an own hash (%cgiparams)
* Introducing oinkmaster config files for enabled and disabled rules.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 10 Dec 2017 09:36:07 +0000 (10:36 +0100)]
ids.cgi: Drop unused css code
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sun, 10 Dec 2017 09:07:41 +0000 (10:07 +0100)]
ids.cgi: Rework code for displaying the single rules
The complete ruleset will be grouped as categories by it's
corresponding rulefile and printed in hidden tables.
They easiely can be displayed by klicking on the show link and
vice-versa.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 6 Dec 2017 10:44:30 +0000 (11:44 +0100)]
ids.cgi: Always display ruleset
Display the rule categories any time and do not hide them
if no instance of snort is runing.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 6 Dec 2017 10:19:42 +0000 (11:19 +0100)]
ids.cgi: Remove comment lines for snort rules control
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Wed, 6 Dec 2017 08:51:46 +0000 (09:51 +0100)]
ids.cgi: Refactor reading-in rule files.
Move the code for reading and parsing the snort rule files
into an own subfunction.
* Drop code for reading in and modifying the snort main config file.
* Rework code for parsing and adding the snort rules to the snortrules hash.
* Drop code for gathering a description for the rule files, which does not
because of a file layout change and sadly there is not suitable description
shipped anymore by the snort team.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 2 Dec 2017 14:31:19 +0000 (15:31 +0100)]
ids.cgi: Move function to end of file
Move the function for doing the page refresh stuff to the end of the file and
do some layout changes for better reading the code.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 2 Dec 2017 14:24:12 +0000 (15:24 +0100)]
ids.cgi: Use pure perl for directory listing
Use pure perl for getting the filelist of available
rule files instead of using a sub-shell and unix commands.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Stefan Schantl [Sat, 2 Dec 2017 14:17:49 +0000 (15:17 +0100)]
ids.cgi: Drop old code for uploading a ruleset
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Michael Tremer [Wed, 25 Jul 2018 09:54:35 +0000 (10:54 +0100)]
cdrom: Move list of EFI modules to lfs/cdrom
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>