public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH v2] suricata: Support Zabbix requirements
@ 2025-10-17 11:09 Adolf Belka
  0 siblings, 0 replies; only message in thread
From: Adolf Belka @ 2025-10-17 11:09 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- The Zabbix addon will use the unix socket and also the suricatasc tool.
- Update configure to enable unix-socket
- Update rootfile to uncomment suricatasc
- This v2 version also sets the unix socket to yes in suricata.yaml

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/suricata | 2 +-
 config/suricata/suricata.yaml    | 2 +-
 lfs/suricata                     | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/suricata b/config/rootfiles/common/suricata
index 2bfc3babd..518920abd 100644
--- a/config/rootfiles/common/suricata
+++ b/config/rootfiles/common/suricata
@@ -3,7 +3,7 @@ etc/suricata/suricata.yaml
 usr/bin/suricata
 usr/bin/suricata-watcher
 #usr/bin/suricatactl
-#usr/bin/suricatasc
+usr/bin/suricatasc
 usr/sbin/convert-ids-backend-files
 #usr/share/doc/suricata
 #usr/share/doc/suricata/AUTHORS
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 31c8d3897..dd3492eb6 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1140,7 +1140,7 @@ runmode: workers
 # activated in live capture mode. You can use the filename variable to set
 # the file name of the socket.
 unix-command:
-  enabled: auto
+  enabled: yes
   #filename: custom.socket
 
 # Magic file. The extension .mgc is added to the value here.
diff --git a/lfs/suricata b/lfs/suricata
index e84c604c6..95403be78 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -83,7 +83,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--with-libjansson-libraries=/usr/lib \
 		--with-libjansson-includes=/usr/include \
 		--disable-suricata-update \
-		--enable-rust
+		--enable-rust \
+		--enable-unix-socket
 
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
-- 
2.51.0



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-10-17 11:09 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-10-17 11:09 [PATCH v2] suricata: Support Zabbix requirements Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox