f21dffc2a3
- Add many options to config file. - Move rules and generated snort.lua to /tmp. - Add script for downloading rules. - Add preliminary reporting capabilites. Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
62 lines
1.4 KiB
Bash
62 lines
1.4 KiB
Bash
#!/bin/sh /etc/rc.common
|
|
# shellcheck disable=SC2039 # "local" not defined in POSIX sh
|
|
|
|
START=99
|
|
STOP=10
|
|
|
|
USE_PROCD=1
|
|
PROG=/usr/bin/snort
|
|
MGR=/usr/bin/snort-mgr
|
|
|
|
validate_snort_section() {
|
|
$MGR -q check || return 1
|
|
uci_validate_section snort snort "${1}" \
|
|
'enabled:bool:0' \
|
|
'manual:bool:1' \
|
|
'config_dir:string' \
|
|
'interface:string'
|
|
}
|
|
|
|
start_service() {
|
|
# If you wish to use application-managed PID file:
|
|
# output.logdir, in the snort lua config, determines the PID file location.
|
|
# Add '--create-pidfile' to the 'command', below.
|
|
|
|
local enabled
|
|
local manual
|
|
local config_dir
|
|
local interface
|
|
|
|
validate_snort_section snort || {
|
|
echo "Validation failed, try 'snort-mgr check'."
|
|
return 1
|
|
}
|
|
|
|
[ "$enabled" = 0 ] && return
|
|
|
|
procd_open_instance
|
|
if [ "$manual" = 0 ]; then
|
|
local config_file=$($MGR setup)
|
|
procd_set_param command "$PROG" -q -c "${config_file}"
|
|
else
|
|
procd_set_param command $PROG -q -i "$interface" -c "${config_dir%/}/snort.lua" --tweaks local
|
|
procd_set_param env SNORT_LUA_PATH="$config_dir"
|
|
procd_set_param file $CONFIGFILE
|
|
fi
|
|
procd_set_param respawn
|
|
procd_set_param stdout 0
|
|
procd_set_param stderr 1
|
|
procd_close_instance
|
|
}
|
|
|
|
stop_service()
|
|
{
|
|
service_stop "$PROG"
|
|
$MGR teardown
|
|
}
|
|
|
|
service_triggers()
|
|
{
|
|
procd_add_reload_trigger "snort"
|
|
procd_add_validation validate_snort_section
|
|
}
|