Open Information Security Foundation

04/16/2019

02:40 PM Suricata Feature #2931: Perform privdrop without libcap-ng support

A v2 Pull request has been published: https://github.com/OISF/suricata/pull/3800 Emmanuel Roullit

04/12/2019

08:19 AM Suricata Feature #2931: Perform privdrop without libcap-ng support

I am not aware of a specific Linux distro having this situation. So test this case on my machine, I forced LIBCAP_NG ... Emmanuel Roullit

04/11/2019

12:18 PM Suricata Feature #2931: Perform privdrop without libcap-ng support

Github PR available at https://github.com/OISF/suricata/pull/3793 Emmanuel Roullit

12:14 PM Suricata Feature #2931 (New): Perform privdrop without libcap-ng support

Some platforms might not have libcap-ng support which disables the "run-as" configuration option and leaves the user ... Emmanuel Roullit

04/08/2019

06:59 AM Suricata Feature #2895: OpenBSD pledge support

We are using a pledged suricata on OpenBSD more than a month without hitch. If there are some questions hindering the... Emmanuel Roullit

04/05/2019

08:58 AM Suricata Bug #2921: chmod file mode warning expressed in incorrect base

PR on Github: https://github.com/OISF/suricata/pull/3776 Emmanuel Roullit

08:56 AM Suricata Bug #2921 (Closed): chmod file mode warning expressed in incorrect base

I have configure suricata to open the output file with filemode 664.
On file rotation, I could see this warning:
<p... Emmanuel Roullit

04/02/2019

07:24 AM Suricata Feature #2895: OpenBSD pledge support

I am using a pledged suricata since then for my day to day use/development and it works without a hitch. Emmanuel Roullit

03/28/2019

10:55 AM Suricata Bug #2909: segfault on logrotation when the files cannot be opened

Pull request on Github: https://github.com/OISF/suricata/pull/3753 Emmanuel Roullit

10:53 AM Suricata Bug #2909 (Closed): segfault on logrotation when the files cannot be opened

To trigger this, I use have made following changes in a vanilla suricata.yaml:... Emmanuel Roullit