Bug #686: ppa: package doesn't install a config - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #686

closed

ppa: package doesn't install a config

Added by Victor Julien over 11 years ago. Updated almost 9 years ago.

Status:

Closed

Priority:

High

Assignee:

Peter Manev

Target version:

Packaging/PPA

Affected Versions:

Effort:

Difficulty:

Label:

Description

After installation there is no config anywhere. After #684 is addressed, /etc/suricata should have the default yaml, a classification config and reference.config.

Actions

Copy link

Updated by Peter Manev over 11 years ago

Should we overwrite if there is a yaml config already ? May be not a good idea, or should we give the end user an option?

Actions

Copy link

Updated by Victor Julien over 11 years ago

Maybe we should install it as suricata-ubuntu.yaml. Then we won't conflict with a already existing copy that is not managed by the deb package.

Actions

Copy link

Updated by Peter Manev over 11 years ago

ok,
could we use suricata-ubuntu-ppa.yaml?
a bit more intuitive maybe.

Actions

Copy link

Updated by Victor Julien over 11 years ago

That works as well.

Actions

Copy link

Updated by Peter Manev over 11 years ago

Status changed from Assigned to Resolved
% Done changed from 0 to 100

Fixed and updated in Ubuntu PPA
Config files are now installed in /etcs/suricata/UbuntuPPA-configs/

Actions

Copy link

Updated by Victor Julien over 11 years ago

Status changed from Resolved to Assigned
% Done changed from 100 to 50

We're not quite there yet:

# suricata
9/1/2013 -- 17:32:22 - <Info> - This is Suricata version 1.4 RELEASE
9/1/2013 -- 17:32:22 - <Info> - CPUs/cores online: 2
Failed to open file: /etc/suricata//suricata.yaml: No such file or directory

If I use the supplied one:

# suricata -c /etc/suricata/UbuntuPPA-configs/suricata-ppa-1.4-6ubuntu6.yaml -i eth0
9/1/2013 -- 17:33:17 - <Info> - This is Suricata version 1.4 RELEASE
<...snip...>
9/1/2013 -- 17:33:18 - <Error> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/usr/local/etc/suricata/classification.config": No such file or directory
9/1/2013 -- 17:33:18 - <Info> - Please check the "classification-file" option in your suricata.yaml file

Actually I'm coming back to the original idea to just place the files in /etc/suricata without the odd names. I think for example debian does it the same way.

Actions

Copy link

Updated by Victor Julien over 11 years ago

Or maybe we can put them in /usr/share/suricata/ and have the post install script from the deb copy them to the /etc/suricata dir, without overwriting what is already there.

Actions

Copy link