Project

General

Profile

Actions

Feature #2344

closed

suricata-update: add a config-option for the user-agent string

Added by Wolfgang Hotwagner about 6 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata-update exposes too much information about the system in the user-agent string:

"Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64; Python: 2.7.13; Dist: debian/9.1; Suricata: 4.0.0-dev)"

I would like to have a config-option to set a custom user-agent string

Actions #1

Updated by Jason Ish about 6 years ago

Part of the reason for the user-agent is better understand the user base, to better serve the user base. Not just the OISF, but rule publishers as well. I wonder if we should include options to hide portions of the user agent as an alternative?

Actions #2

Updated by Wolfgang Hotwagner about 6 years ago

In my opinion "Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64)" might be enough. Linux-distribution-release and python-version could expose unpatched bugs. But even with a shorter user-agent string, I would rather have an option to change it. I'm pretty sure that the majority of all suricata-update-user would still use the default.

Actions #3

Updated by Victor Julien about 6 years ago

  • Project changed from Suricata to Suricata-Update
Actions #4

Updated by Jason Ish about 6 years ago

  • Assignee set to Wolfgang Hotwagner
  • Target version set to 1.0.0

Please submit your patch. If up to it, might want to add an example to the sample configuration file. With what you've done it should already be picked up in the configuration file, with preference to the one provided on the command line.
Thanks.

Actions #5

Updated by Jason Ish about 6 years ago

  • Status changed from New to Closed
  • Target version changed from 1.0.0 to 1.0.0b1
Actions

Also available in: Atom PDF