Project

General

Profile

Actions

Feature #4775

open

lua: overhaul lua support

Added by Victor Julien over 2 years ago. Updated 12 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Implement https://redmine.openinfosecfoundation.org/issues/3307#note-12:

  • vendor a specific version in
  • disallow modules by default (or at all)
  • do proper sandboxing, both for security and performance
  • enable it by default so rule vendors can rely on it to be there

Subtasks 7 (7 open0 closed)

Feature #1971: lua: make mandatoryIn ProgressOISF DevActions
Feature #2290: lua: use script as transformAssignedJeff LucovskyActions
Feature #4776: lua: vendor latest lua stableAssignedJason IshActions
Task #6961: lua create: use a rust crate to vendor luaIn ProgressJason IshActions
Feature #4777: lua: implement sandboxingIn ProgressJason IshActions
Feature #6939: lua: incremement stat when a lua rule exhausts its instruction countNewOISF DevActions
Feature #6940: lua: handle errors in lua rulesNewOISF DevActions

Related issues 5 (4 open1 closed)

Related to Suricata - Task #3307: Research: evaluate future of lua support in SuricataNewOISF DevActions
Related to Suricata - Feature #1504: lua: better notification in verbose mode on script errorsNewOISF DevActions
Related to Suricata - Feature #1505: lua: show lua scripts during rule (re)loadingNewOISF DevActions
Related to Suricata - Feature #2871: lua: Exposing byte extract to scriptClosedJeff LucovskyActions
Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Actions

Also available in: Atom PDF