]> git.ipfire.org Git - thirdparty/snort3.git/commit
Merge pull request #2608 in SNORT/snort3 from ~SHRARANG/snort3:lua_sandbox to master
authorShravan Rangarajuvenkata (shrarang) <shrarang@cisco.com>
Wed, 2 Dec 2020 17:43:31 +0000 (17:43 +0000)
committerShravan Rangarajuvenkata (shrarang) <shrarang@cisco.com>
Wed, 2 Dec 2020 17:43:31 +0000 (17:43 +0000)
commitc5376325841289ca4af8e313d96732dbc656fc10
tree31b2c80a0eb86b7eee58dd53ddfc7d1c479758b2
parentf0bd62338106eee2f4df7c6c884eea9d52641785
Merge pull request #2608 in SNORT/snort3 from ~SHRARANG/snort3:lua_sandbox to master

Squashed commit of the following:

commit bd0c2a888b69a9791bb2b8dd196c8a6fdd53ca1c
Author: Shravan Rangaraju <shrarang@cisco.com>
Date:   Fri Jul 31 12:05:26 2020 -0400

    shell: support for loading configuration in lua sandbox

    Load snort configuration in a Lua sandbox. Sandbox configuration file can be specified
    with the command line option "--lua-sandbox". Snort expects this file to contain a Lua
    table named sandbox_env. sandbox_env should specify a list of allowed Lua functions.
    This table is used as the sandbox environment. Snort loads the following in the sandbox:
     - top-level configuration file specified by command line option "-c"
     - subpolicy files
     - all of the included files in above files and also files included in the included files
     - configuration overrides specified with command line option "--lua"
    If any of the above use Lua functionality not allowed in sandbox_env, snort will exit with
    a fatal error.
src/host_tracker/test/host_cache_module_test.cc
src/lua_wrap.sh [moved from src/managers/lua_wrap.sh with 100% similarity]
src/main/CMakeLists.txt
src/main/bootstrap.lua [moved from src/managers/bootstrap.lua with 73% similarity]
src/main/finalize.lua [moved from src/managers/finalize.lua with 88% similarity]
src/main/shell.cc
src/main/shell.h
src/main/snort_module.cc
src/managers/CMakeLists.txt
src/managers/module_manager.cc
src/managers/module_manager.h