Actions
Bug #6095
closedwindows: lua script path truncated
Affected Versions:
Effort:
Difficulty:
Label:
Description
As privately reported.
On windows only when lua scripts are used.
It seems that on Windows exclusively, Suricata removes the last letter of each lua file present in rule and that prevents the execution of the script:
For "luajit: myscript.lua;", suricata will search for the file "myscript.lu" without the last letter.
We need to add a random letter to bypass the problem, like this:
"luajit: myscript.luaa;"
Updated by Victor Julien over 1 year ago
- Subject changed from Windows: A letter is removed from the lua script name upon loading to windows: lua script path truncated
- Target version changed from TBD to 7.0.1
- Label Needs backport to 6.0 added
Updated by Eric Leblond over 1 year ago
This code should fix the problem but I can not test: https://github.com/regit/suricata/tree/windows-lua
Updated by Victor Julien over 1 year ago
- Status changed from New to In Progress
- Assignee changed from OISF Dev to Victor Julien
Updated by Victor Julien over 1 year ago
- Status changed from In Progress to In Review
Updated by Victor Julien over 1 year ago
- Status changed from In Review to Resolved
Updated by Victor Julien over 1 year ago
@Peter Manev can you test the current git master to see if things work still correctly after the above fixes? I've tested within mingw bash, but not from the regular windows command prompt which sometimes behaves differently I think.
Actions