Project

General

Profile

Feature #2344

suricata-update: add a config-option for the user-agent string

Added by Wolfgang Hotwagner over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata-update exposes too much information about the system in the user-agent string:

"Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64; Python: 2.7.13; Dist: debian/9.1; Suricata: 4.0.0-dev)"

I would like to have a config-option to set a custom user-agent string

#1

Updated by Jason Ish over 2 years ago

Part of the reason for the user-agent is better understand the user base, to better serve the user base. Not just the OISF, but rule publishers as well. I wonder if we should include options to hide portions of the user agent as an alternative?

#2

Updated by Wolfgang Hotwagner over 2 years ago

In my opinion "Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64)" might be enough. Linux-distribution-release and python-version could expose unpatched bugs. But even with a shorter user-agent string, I would rather have an option to change it. I'm pretty sure that the majority of all suricata-update-user would still use the default.

#3

Updated by Victor Julien over 2 years ago

  • Project changed from Suricata to Suricata-Update
#4

Updated by Jason Ish over 2 years ago

  • Assignee set to Wolfgang Hotwagner
  • Target version set to 1.0.0

Please submit your patch. If up to it, might want to add an example to the sample configuration file. With what you've done it should already be picked up in the configuration file, with preference to the one provided on the command line.
Thanks.

#5

Updated by Jason Ish over 2 years ago

  • Status changed from New to Closed
  • Target version changed from 1.0.0 to 1.0.0b1

Also available in: Atom PDF