Core Update 173: Ship and restart Suricata

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/config/rootfiles/core/173/filelists/suricata b/config/rootfiles/core/173/filelists/suricata
new file mode 120000 (symlink)
index 0000000..f671f69
--- /dev/null
+++ b/config/rootfiles/core/173/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file

diff --git a/config/rootfiles/core/173/update.sh b/config/rootfiles/core/173/update.sh
index c2bfe25b13a05ce593439862f84dbbc9f2961af7..24d89c30aa9d9ca7a2390bc42d3c12aef4d8d561 100644 (file)
--- a/config/rootfiles/core/173/update.sh
+++ b/config/rootfiles/core/173/update.sh
@@ -49,6 +49,7 @@ done
 /usr/local/bin/openvpnctrl -k
 /usr/local/bin/openvpnctrl -kn2n
 /etc/rc.d/init.d/sshd stop
+/etc/rc.d/init.d/suricata stop
 
 KVER="xxxKVERxxx"
 
@@ -135,6 +136,9 @@ done
 /usr/local/bin/sshctrl
 
 # Start services
+if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then
+       /etc/rc.d/init.d/suricata start
+fi
 /etc/rc.d/init.d/apache start
 if grep -q "ENABLE_SSH=on" /var/ipfire/remote/settings; then
        /etc/init.d/sshd start