Project

General

Profile

Actions
Copy link

Story #7128

open

Task #7123: tracking: improve detection capabilities

lua: sandboxed lua support with mimimum set of bindings

Added by Victor Julien 6 months ago. Updated 6 months ago.

Status:
New
Priority:
Normal
Assignee:
Victor Julien
Target version:
8.0.0

Description

Goal for 8.0.0 is to revamp lua support, implementing by default sandboxing, making lua generally available and provide a good default set of bindings to allow script writers to express detection logic.

Related issues 11 (8 open — 3 closed)

Related to Suricata - Bug #7169: lua/output: vendored lua search for modules in /usr/local/ rather than /usr/NewOISF DevActions
Blocked by Suricata - Feature #4776: lua: vendor latest lua stableIn ProgressJason IshActions
Blocked by Suricata - Task #6961: lua create: use a rust crate to vendor luaIn ProgressJason IshActions
Blocked by Suricata - Feature #2290: lua: use script as transformIn ReviewJeff LucovskyActions
Blocked by Suricata - Feature #4777: lua: implement sandboxingClosedJason IshActions
Blocked by Suricata - Feature #6939: lua: incremement stat when a lua rule exhausts its instruction countClosedJason IshActions
Blocked by Suricata - Bug #6940: lua: handle errors in lua rulesClosedJason IshActions
Blocked by Suricata - Feature #7074: lua: expose base64 functionsNewJason IshActions
Blocked by Suricata - Feature #7073: lua: expose hashing functions (md5/sha1/sha256)NewJason IshActions
Blocked by Suricata - Optimization #4753: lua: fix inconsistency in the init "needs" keyNewJason IshActions
Blocked by Suricata - Feature #7243: lua: expose dataset functionsIn ProgressVictor JulienActions
Actions
Copy link

Also available in: Atom PDF