Skip to content
This repository has been archived by the owner on Apr 19, 2021. It is now read-only.

Commit

Permalink
Issue 904: Setup should run pulledpork and squert-ip2c as limited user
Browse files Browse the repository at this point in the history
  • Loading branch information
dougburks committed May 10, 2016
1 parent d6f5026 commit ce1d7db
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions bin/sosetup
Original file line number Diff line number Diff line change
Expand Up @@ -1588,7 +1588,9 @@ EOF
if [ "$IDS_ENGINE_LOWER" = "suricata" ]; then
PP_OPTIONS="$PP_OPTIONS -T"
fi
/usr/bin/pulledpork.pl $PP_OPTIONS -c $PP_CONF >> /var/log/nsm/pulledpork.log
touch /var/log/nsm/pulledpork.log
chown sguil /var/log/nsm/pulledpork.log
su - sguil -c "/usr/bin/pulledpork.pl $PP_OPTIONS -c $PP_CONF" >> /var/log/nsm/pulledpork.log
echo "LOCAL_NIDS_RULE_TUNING=no" >> $CONF
else
echo "LOCAL_NIDS_RULE_TUNING=yes" >> $CONF
Expand Down Expand Up @@ -1907,12 +1909,10 @@ function IP2C() {
# If this is a server, populate ip2c table
if [ -d /var/lib/mysql/securityonion_db/ ]; then
/usr/bin/sguild-add-user "$SGUIL_CLIENT_USERNAME" "$SGUIL_CLIENT_PASSWORD_1" >/dev/null
cd /var/www/so/squert/.scripts/
# Setup needs to delete /var/www/so/squert/.scripts/Ip2c/*.md5 before running ip2c.tcl
# Setup needs to delete /var/www/so/squert/.scripts/*.md5 before running ip2c.tcl
# http://code.google.com/p/security-onion/issues/detail?id=250
rm -f *.md5
./ip2c.tcl >> $LOG 2>&1 &
cd - >/dev/null
rm -f /var/www/so/squert/.scripts/*.md5
/usr/bin/so-squert-ip2c >> $LOG 2>&1 &
fi
}

Expand Down

0 comments on commit ce1d7db

Please sign in to comment.