From: Adolf Belka <adolf.belka@ipfire.org>
Date: Fri, 17 Oct 2025 11:09:24 +0000 (+0200)
Subject: suricata: Support Zabbix requirements
X-Git-Tag: v2.29-core199~17^2~157
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=07eecbb929487ae8e1be92e1b6015282c293c9f1;p=ipfire-2.x.git

suricata: Support Zabbix requirements

- The Zabbix addon will use the unix socket and also the suricatasc tool.
- Update configure to enable unix-socket
- Update rootfile to uncomment suricatasc
- This v2 version also sets the unix socket to yes in suricata.yaml

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/common/suricata b/config/rootfiles/common/suricata
index 2bfc3babd..518920abd 100644
--- a/config/rootfiles/common/suricata
+++ b/config/rootfiles/common/suricata
@@ -3,7 +3,7 @@ etc/suricata/suricata.yaml
 usr/bin/suricata
 usr/bin/suricata-watcher
 #usr/bin/suricatactl
-#usr/bin/suricatasc
+usr/bin/suricatasc
 usr/sbin/convert-ids-backend-files
 #usr/share/doc/suricata
 #usr/share/doc/suricata/AUTHORS
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 31c8d3897..dd3492eb6 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1140,7 +1140,7 @@ runmode: workers
 # activated in live capture mode. You can use the filename variable to set
 # the file name of the socket.
 unix-command:
-  enabled: auto
+  enabled: yes
   #filename: custom.socket
 
 # Magic file. The extension .mgc is added to the value here.
diff --git a/lfs/suricata b/lfs/suricata
index e84c604c6..95403be78 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -83,7 +83,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--with-libjansson-libraries=/usr/lib \
 		--with-libjansson-includes=/usr/include \
 		--disable-suricata-update \
-		--enable-rust
+		--enable-rust \
+		--enable-unix-socket
 
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install