install-rules: use suricata-update if available

If Suricata update was bundled, use it for "install-rules" instead
of curl or wget.

diff --git a/Makefile.am b/Makefile.am
index 322ad3999828bcbe1593329728951a6535d9a13b..90982cb9286e6a83f448b5dc80f6bc696d5c7563 100644 (file)
--- a/Makefile.am
+++ b/Makefile.am
@@ -30,6 +30,12 @@ install-conf:
        install -m 770 -d "$(DESTDIR)$(e_localstatedir)"
 
 install-rules:
+if HAVE_SURICATA_UPDATE
+       $(DESTDIR)$(bindir)/suricata-update \
+               --suricata $(DESTDIR)$(bindir)/suricata \
+               --suricata-conf $(DESTDIR)$(sysconfdir)/suricata/suricata.yaml \
+               --no-test --no-reload
+else
        install -d "$(DESTDIR)$(e_sysconfrulesdir)"
 if HAVE_FETCH_COMMAND
 if HAVE_WGET_COMMAND
@@ -58,3 +64,4 @@ endif
        @echo "While rules are installed now, it's highly recommended to use a rule manager for maintaining rules."
        @echo "The three most common are Suricata-Update, Oinkmaster and Pulledpork. For a guide see:"
        @echo "https://suricata.readthedocs.io/en/latest/rule-management/index.html"
+endif

diff --git a/configure.ac b/configure.ac
index 12a7d179f0d98670337b7913b482184d224a3f37..0b0ff7a41b4ff6a245164bc4f30a55b44d64959f 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1376,11 +1376,14 @@
   ])
 
   # suricata-update
+  have_suricata_update="no"
   AC_CHECK_FILE([$srcdir/suricata-update/setup.py], [
       SURICATA_UPDATE_DIR="suricata-update"
       AC_SUBST(SURICATA_UPDATE_DIR)
       AC_OUTPUT(suricata-update/Makefile)
+      have_suricata_update="yes"
   ])
+  AM_CONDITIONAL([HAVE_SURICATA_UPDATE], [test "x$have_suricata_update" != "xno"])
 
   # libhtp
     AC_ARG_ENABLE(non-bundled-htp,