Core Update 175: Ship and restart Suricata

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/config/rootfiles/core/175/filelists/suricata b/config/rootfiles/core/175/filelists/suricata
new file mode 120000 (symlink)
index 0000000..f671f69
--- /dev/null
+++ b/config/rootfiles/core/175/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file

diff --git a/config/rootfiles/core/175/update.sh b/config/rootfiles/core/175/update.sh
index 7615a52b02d4734e8f43a0f95b118c83feec60ab..2c106f69ef9cb1d5b8f187c3f3681951f66f3f4b 100644 (file)
--- a/config/rootfiles/core/175/update.sh
+++ b/config/rootfiles/core/175/update.sh
@@ -48,6 +48,7 @@ done
 /etc/rc.d/init.d/ntp stop
 /etc/rc.d/init.d/sshd stop
 /etc/rc.d/init.d/unbound stop
+/etc/rc.d/init.d/suricata stop
 
 KVER="xxxKVERxxx"
 
@@ -134,6 +135,9 @@ chmod -v 644 /var/log/pakfire.log
 /etc/rc.d/init.d/firewall restart
 
 # Start services
+if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then
+       /etc/rc.d/init.d/suricata start
+fi
 /etc/rc.d/init.d/unbound start
 /etc/rc.d/init.d/apache start
 /etc/rc.d/init.d/ntp start