Feature #2344: suricata-update: add a config-option for the user-agent string - Suricata-Update - Open Information Security Foundation

Actions

Copy link

Feature #2344

closed

suricata-update: add a config-option for the user-agent string

Added by Wolfgang Hotwagner almost 7 years ago. Updated almost 7 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Wolfgang Hotwagner

Target version:

1.0.0b1

Effort:

Difficulty:

Label:

Description

Suricata-update exposes too much information about the system in the user-agent string:

"Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64; Python: 2.7.13; Dist: debian/9.1; Suricata: 4.0.0-dev)"

I would like to have a config-option to set a custom user-agent string

Actions

Copy link

Updated by Jason Ish almost 7 years ago

Part of the reason for the user-agent is better understand the user base, to better serve the user base. Not just the OISF, but rule publishers as well. I wonder if we should include options to hide portions of the user agent as an alternative?

Actions

Copy link

Updated by Wolfgang Hotwagner almost 7 years ago

In my opinion "Suricata-Update/1.0.0a1 (OS: Linux; CPU: x86_64)" might be enough. Linux-distribution-release and python-version could expose unpatched bugs. But even with a shorter user-agent string, I would rather have an option to change it. I'm pretty sure that the majority of all suricata-update-user would still use the default.

Actions

Copy link

Updated by Victor Julien almost 7 years ago

Project changed from Suricata to Suricata-Update

Actions

Copy link

Updated by Jason Ish almost 7 years ago

Assignee set to Wolfgang Hotwagner
Target version set to 1.0.0

Please submit your patch. If up to it, might want to add an example to the sample configuration file. With what you've done it should already be picked up in the configuration file, with preference to the one provided on the command line.
Thanks.

Actions

Copy link