Added by Wolfgang Hotwagner over 6 years ago. Updated over 6 years ago.
Description
Suricata-update exposes too much information about the system in the user-agent string:
"Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64; Python: 2.7.13; Dist: debian/9.1; Suricata: 4.0.0-dev)"
I would like to have a config-option to set a custom user-agent string
Part of the reason for the user-agent is better understand the user base, to better serve the user base. Not just the OISF, but rule publishers as well. I wonder if we should include options to hide portions of the user agent as an alternative?
In my opinion "Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64)" might be enough. Linux-distribution-release and python-version could expose unpatched bugs. But even with a shorter user-agent string, I would rather have an option to change it. I'm pretty sure that the majority of all suricata-update-user would still use the default.
Please submit your patch. If up to it, might want to add an example to the sample configuration file. With what you've done it should already be picked up in the configuration file, with preference to the one provided on the command line.
Thanks.
Merged with https://github.com/OISF/suricata-update/pull/20.