|
|
78273e7 |
Summary: Intrusion Detection System
|
|
|
78273e7 |
Name: suricata
|
|
|
b0c78c5 |
Version: 6.0.11
|
|
|
59c20ea |
Release: 1%{?dist}
|
|
|
d804767 |
License: GPL-2.0-only
|
|
|
6348471 |
URL: https://suricata-ids.org/
|
|
|
a014bc6 |
Source0: https://www.openinfosecfoundation.org/download/%{name}-%{version}.tar.gz
|
|
|
a014bc6 |
Source1: suricata.sysconfig
|
|
|
a014bc6 |
Source2: fedora.notes
|
|
|
a014bc6 |
Source3: suricata-tmpfiles.conf
|
|
|
715e2a7 |
|
|
|
90a2c90 |
# Irrelevant docs are getting installed, drop them
|
|
|
715e2a7 |
Patch1: suricata-2.0.9-docs.patch
|
|
|
cfb3b99 |
# Suricata service file needs some options supplied
|
|
|
cfb3b99 |
Patch2: suricata-4.1.1-service.patch
|
|
|
34e05f5 |
# Linux 5.2 headers moved SIOCGSTAMP to linux/sockios.h. Glibc will
|
|
|
34e05f5 |
# include it via sys/socket.h in a future release. This is temporary
|
|
|
34e05f5 |
# and should not be needed on other kernel/glibc combos.
|
|
|
fd72c2b |
Patch3: suricata-4.1.4-socket.patch
|
|
|
d018a60 |
# The default path needs to be fixed up to where Fedora keeps it
|
|
|
d018a60 |
Patch4: suricata-5.0.4-geolite-path-fixup.patch
|
|
|
d018a60 |
# The log path has an extra '/' at the end
|
|
|
591a9d1 |
Patch5: suricata-6.0.3-log-path-fixup.patch
|
|
|
b7ffcc6 |
# Build fails with ambiguous python shebang
|
|
|
59c20ea |
Patch6: suricata-6.0.9-python.patch
|
|
|
b0c78c5 |
# Build has a warning that this fixes
|
|
|
b0c78c5 |
Patch7: suricata-6.0.11-maxint.patch
|
|
|
715e2a7 |
|
|
|
2f8cb90 |
BuildRequires: make
|
|
|
4bcf6d9 |
BuildRequires: gcc gcc-c++
|
|
|
0c921bc |
BuildRequires: cargo rust >= 1.33
|
|
|
eed5d4e |
BuildRequires: rust-packaging
|
|
|
1adcd5f |
BuildRequires: libyaml-devel python3-pyyaml
|
|
|
78273e7 |
BuildRequires: libnfnetlink-devel libnetfilter_queue-devel libnet-devel
|
|
|
2e67f2b |
BuildRequires: zlib-devel pcre-devel libcap-ng-devel
|
|
|
2e67f2b |
BuildRequires: lz4-devel libpcap-devel
|
|
|
d1b4434 |
BuildRequires: nspr-devel nss-devel nss-softokn-devel file-devel
|
|
|
1adcd5f |
BuildRequires: jansson-devel libmaxminddb-devel python3-devel lua-devel
|
|
|
1adcd5f |
# Next line is for eBPF support
|
|
|
1b2b28e |
%if 0%{?fedora} >= 32
|
|
|
abc2097 |
%ifarch x86_64
|
|
|
bf574e1 |
BuildRequires: clang llvm libbpf-devel
|
|
|
abc2097 |
%endif
|
|
|
0c921bc |
%endif
|
|
|
78273e7 |
BuildRequires: autoconf automake libtool
|
|
|
3d56a61 |
BuildRequires: systemd-devel
|
|
|
cd5c89d |
BuildRequires: hiredis-devel
|
|
|
cd5c89d |
BuildRequires: libevent-devel
|
|
|
7a17d4f |
# Prelude is disabled pending resolution of bz 1908783
|
|
|
8096d96 |
#BuildRequires: libprelude-devel
|
|
|
cd5c89d |
BuildRequires: pkgconfig(gnutls)
|
|
|
7eec7f8 |
|
|
|
ff7dfc2 |
%if 0%{?fedora} >= 25 || 0%{?epel} >= 8
|
|
|
7eec7f8 |
%ifarch x86_64
|
|
|
7eec7f8 |
BuildRequires: hyperscan-devel
|
|
|
7eec7f8 |
%endif
|
|
|
7eec7f8 |
%endif
|
|
|
7eec7f8 |
|
|
|
06626df |
Requires: python3-pyyaml
|
|
|
f910ca4 |
Requires(pre): /usr/sbin/useradd
|
|
|
5b94559 |
Requires(post): systemd
|
|
|
5b94559 |
Requires(preun): systemd
|
|
|
5b94559 |
Requires(postun): systemd
|
|
|
78273e7 |
|
|
|
e220e52 |
# Rust is not working on ppc64le systems (bz 1757548)
|
|
|
cd044a8 |
# Or i686 (bz 2047425)
|
|
|
cd044a8 |
ExcludeArch: ppc64le i686
|
|
|
e220e52 |
|
|
|
e220e52 |
|
|
|
78273e7 |
%description
|
|
|
78273e7 |
The Suricata Engine is an Open Source Next Generation Intrusion
|
|
|
78273e7 |
Detection and Prevention Engine. This engine is not intended to
|
|
|
78273e7 |
just replace or emulate the existing tools in the industry, but
|
|
|
78273e7 |
will bring new ideas and technologies to the field. This new Engine
|
|
|
78273e7 |
supports Multi-threading, Automatic Protocol Detection (IP, TCP,
|
|
|
78273e7 |
UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP
|
|
|
69e67b2 |
Matching, and GeoIP identification.
|
|
|
78273e7 |
|
|
|
78273e7 |
%prep
|
|
|
a6fc724 |
%setup -q
|
|
|
a014bc6 |
install -m 644 %{SOURCE2} doc/
|
|
|
b0c78c5 |
%patch -P1 -p1
|
|
|
b0c78c5 |
%patch -P2 -p1
|
|
|
b0c78c5 |
%patch -P3 -p1
|
|
|
b0c78c5 |
%patch -P4 -p1
|
|
|
b0c78c5 |
%patch -P5 -p1
|
|
|
b0c78c5 |
%patch -P6 -p1
|
|
|
b0c78c5 |
%patch -P7 -p1
|
|
|
4bcf6d9 |
sed -i 's/(datadir)/(sysconfdir)/' etc/Makefile.am
|
|
|
1f1dbb3 |
%ifarch x86_64
|
|
|
bf574e1 |
sed -i 's/-D__KERNEL__/-D__KERNEL__ -D__x86_64__/' ebpf/Makefile.am
|
|
|
1f1dbb3 |
%endif
|
|
|
78273e7 |
autoreconf -fv --install
|
|
|
78273e7 |
|
|
|
78273e7 |
%build
|
|
|
eed5d4e |
# ensure standard Rust compiler flags are set
|
|
|
eed5d4e |
export RUSTFLAGS="%build_rustflags"
|
|
|
eed5d4e |
|
|
|
4bcf6d9 |
%configure --enable-gccprotect --enable-pie --disable-gccmarch-native \
|
|
|
cd922c6 |
--disable-coccinelle --enable-nfqueue --enable-af-packet \
|
|
|
cd922c6 |
--with-libnspr-includes=/usr/include/nspr4 \
|
|
|
cd922c6 |
--with-libnss-includes=/usr/include/nss3 \
|
|
|
cd922c6 |
--enable-jansson --enable-geoip --enable-lua --enable-hiredis \
|
|
|
540bed3 |
--enable-rust \
|
|
|
1b2b28e |
%if 0%{?fedora} >= 32
|
|
|
abc2097 |
%ifarch x86_64
|
|
|
cd922c6 |
--enable-ebpf-build --enable-ebpf \
|
|
|
4bcf6d9 |
%endif
|
|
|
0c921bc |
%endif
|
|
|
cd922c6 |
--enable-python
|
|
|
2ae3a89 |
|
|
|
715e2a7 |
%make_build
|
|
|
78273e7 |
|
|
|
78273e7 |
%install
|
|
|
5b94559 |
make DESTDIR="%{buildroot}" "bindir=%{_sbindir}" install
|
|
|
78273e7 |
|
|
|
78273e7 |
# Setup etc directory
|
|
|
2ae3a89 |
mkdir -p %{buildroot}%{_sysconfdir}/%{name}/rules
|
|
|
2e67f2b |
install -m 640 rules/*.rules %{buildroot}%{_sysconfdir}/%{name}/rules
|
|
|
cd922c6 |
install -m 600 etc/*.config %{buildroot}%{_sysconfdir}/%{name}
|
|
|
cd922c6 |
install -m 600 threshold.config %{buildroot}%{_sysconfdir}/%{name}
|
|
|
2ae3a89 |
install -m 600 suricata.yaml %{buildroot}%{_sysconfdir}/%{name}
|
|
|
5b94559 |
mkdir -p %{buildroot}%{_unitdir}
|
|
|
d671f95 |
install -m 0644 etc/%{name}.service %{buildroot}%{_unitdir}/
|
|
|
5b94559 |
mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
|
|
|
a014bc6 |
install -m 0755 %{SOURCE1} %{buildroot}%{_sysconfdir}/sysconfig/%{name}
|
|
|
78273e7 |
|
|
|
715e2a7 |
# Set up logging
|
|
|
2ae3a89 |
mkdir -p %{buildroot}/%{_var}/log/%{name}
|
|
|
2ae3a89 |
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
|
|
d671f95 |
install -m 644 etc/%{name}.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
|
|
|
78273e7 |
|
|
|
78273e7 |
# Remove a couple things so they don't get picked up
|
|
|
5b94559 |
rm -rf %{buildroot}%{_includedir}
|
|
|
5b94559 |
rm -f %{buildroot}%{_libdir}/libhtp.la
|
|
|
5b94559 |
rm -f %{buildroot}%{_libdir}/libhtp.a
|
|
|
5b94559 |
rm -f %{buildroot}%{_libdir}/libhtp.so
|
|
|
5b94559 |
rm -rf %{buildroot}%{_libdir}/pkgconfig
|
|
|
78273e7 |
|
|
|
2e67f2b |
# Setup suricata-update data directory
|
|
|
2e67f2b |
mkdir -p %{buildroot}/%{_var}/lib/%{name}
|
|
|
2e67f2b |
|
|
|
7344e7d |
# Setup tmpdirs
|
|
|
5b94559 |
mkdir -p %{buildroot}%{_tmpfilesdir}
|
|
|
a014bc6 |
install -m 0644 %{SOURCE3} %{buildroot}%{_tmpfilesdir}/%{name}.conf
|
|
|
7344e7d |
mkdir -p %{buildroot}/run
|
|
|
7344e7d |
install -d -m 0755 %{buildroot}/run/%{name}/
|
|
|
7344e7d |
|
|
|
2e67f2b |
cp suricata-update/README.rst doc/suricata-update-README.rst
|
|
|
2e67f2b |
|
|
|
78273e7 |
%check
|
|
|
78273e7 |
make check
|
|
|
78273e7 |
|
|
|
4dbb303 |
%pre
|
|
|
4dbb303 |
getent passwd suricata >/dev/null || useradd -r -M -s /sbin/nologin suricata
|
|
|
4dbb303 |
|
|
|
4bcbe07 |
%post
|
|
|
c778508 |
%systemd_post suricata.service
|
|
|
7a17d4f |
if [ -d %{_var}/log/%{name} ] ; then
|
|
|
7a17d4f |
file=$(ls %{_var}/log/%{name}/* 2> /dev/null | wc -l)
|
|
|
7a17d4f |
if [ -n "$files" ] && [ "$files" != "0" ] ; then
|
|
|
7a17d4f |
chown suricata %{_var}/log/%{name}/* 2> /dev/null
|
|
|
7a17d4f |
fi
|
|
|
7a17d4f |
fi
|
|
|
78273e7 |
|
|
|
78273e7 |
%preun
|
|
|
c778508 |
%systemd_preun suricata.service
|
|
|
78273e7 |
|
|
|
4bcbe07 |
%postun
|
|
|
c778508 |
%systemd_postun_with_restart suricata.service
|
|
|
78273e7 |
|
|
|
78273e7 |
%files
|
|
|
2e67f2b |
%doc doc/Basic_Setup.txt doc/suricata-update-README.rst
|
|
|
a5bb759 |
%doc doc/Setting_up_IPSinline_for_Linux.txt doc/fedora.notes
|
|
|
2ae3a89 |
%{!?_licensedir:%global license %%doc}
|
|
|
2ae3a89 |
%license COPYING
|
|
|
09a0253 |
%attr(644,root,root) %{_mandir}/man1/*
|
|
|
78273e7 |
%{_sbindir}/suricata
|
|
|
4a322b2 |
%{_sbindir}/suricatasc
|
|
|
4a322b2 |
%{_sbindir}/suricatactl
|
|
|
4a322b2 |
%{_sbindir}/suricata-update
|
|
|
72488dc |
%{_libdir}/libhtp*
|
|
|
4a322b2 |
/usr/lib/suricata/python/suricata/*
|
|
|
4a322b2 |
/usr//lib/suricata/python/suricatasc
|
|
|
2e67f2b |
%config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/suricata.yaml
|
|
|
2e67f2b |
%config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/*.config
|
|
|
2e67f2b |
%config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/rules/*.rules
|
|
|
2ae3a89 |
%config(noreplace) %attr(0600,suricata,root) %{_sysconfdir}/sysconfig/%{name}
|
|
|
8b8b63d |
%attr(644,root,root) %{_unitdir}/suricata.service
|
|
|
2ae3a89 |
%config(noreplace) %attr(644,root,root) %{_sysconfdir}/logrotate.d/%{name}
|
|
|
d671f95 |
%attr(750,suricata,suricata) %dir %{_var}/log/%{name}
|
|
|
2e67f2b |
%attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}
|
|
|
2e67f2b |
%attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}/rules
|
|
|
5588aee |
%attr(2770,suricata,suricata) %dir %{_var}/lib/%{name}
|
|
|
02dc60e |
%attr(2770,suricata,suricata) %dir /run/%{name}/
|
|
|
7344e7d |
%{_tmpfilesdir}/%{name}.conf
|
|
|
4686f00 |
%{_datadir}/%{name}/rules
|
|
|
78273e7 |
|
|
|
78273e7 |
%changelog
|
|
|
b0c78c5 |
* Thu Apr 13 2023 Steve Grubb <sgrubb@redhat.com> 6.0.11-1
|
|
|
b0c78c5 |
- New security and bugfix release
|
|
|
b0c78c5 |
|
|
|
59c20ea |
* Mon Mar 13 2023 Steve Grubb <sgrubb@redhat.com> 6.0.10-1
|
|
|
59c20ea |
- New security and bugfix release
|
|
|
59c20ea |
|
|
|
eed5d4e |
* Mon Feb 06 2023 Fabio Valentini <decathorpe@gmail.com> - 6.0.9-3
|
|
|
eed5d4e |
- Ensure standard Rust compiler flags are set.
|
|
|
eed5d4e |
|
|
|
bdbe78f |
* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.9-2
|
|
|
bdbe78f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
bdbe78f |
|
|
|
3d56a61 |
* Tue Dec 13 2022 Steve Grubb <sgrubb@redhat.com> 6.0.9-1
|
|
|
3d56a61 |
- New security and bugfix release
|
|
|
d804767 |
- SPDX migration
|
|
|
3d56a61 |
|
|
Jiri Olsa |
c25572c |
* Thu Nov 03 2022 Jiri Olsa <jolsa@kernel.org> - 6.0.6-3
|
|
Jiri Olsa |
c25572c |
- libbpf 1.0.0 build
|
|
Jiri Olsa |
c25572c |
|
|
|
c797874 |
* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.6-2
|
|
|
c797874 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
c797874 |
|
|
|
d042507 |
* Tue Jul 12 2022 Steve Grubb <sgrubb@redhat.com> 6.0.6-1
|
|
|
d042507 |
- New security and bugfix release
|
|
|
d042507 |
|
|
|
ed4854f |
* Mon Jun 13 2022 Python Maint <python-maint@redhat.com> - 6.0.5-2
|
|
|
ed4854f |
- Rebuilt for Python 3.11
|
|
|
ed4854f |
|
|
|
1db9700 |
* Tue Apr 26 2022 Steve Grubb <sgrubb@redhat.com> 6.0.5-1
|
|
|
1db9700 |
- New security and bugfix release
|
|
|
1db9700 |
|
|
|
cd044a8 |
* Thu Mar 17 2022 Steve Grubb <sgrubb@redhat.com> 6.0.4-5
|
|
|
cd044a8 |
- ExcludeArch i686
|
|
|
cd044a8 |
|
|
|
15e39f5 |
* Thu Jan 27 2022 Steve Grubb <sgrubb@redhat.com> 6.0.4-4
|
|
|
7a17d4f |
- Updated post install script to chown only if files exist
|
|
|
7a17d4f |
|
|
|
ca0a5c2 |
* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.4-3
|
|
|
ca0a5c2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
ca0a5c2 |
|
|
|
c56212a |
* Tue Jan 18 2022 Kevin Fenzi <kevin@scrye.com> - 6.0.4-2
|
|
|
c56212a |
- Rebuild for hiredis 1.0.2
|
|
|
c56212a |
|
|
|
9afa2ee |
* Thu Nov 18 2021 Jason Taylor <jtfas90@gmail.com> 6.0.4-1
|
|
|
9afa2ee |
- New security and bugfix release
|
|
|
9afa2ee |
|
|
|
0ab4b68 |
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.3-2
|
|
|
0ab4b68 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
0ab4b68 |
|
|
|
591a9d1 |
* Thu Jul 01 2021 Steve Grubb <sgrubb@redhat.com> 6.0.3-1
|
|
|
591a9d1 |
- New security and bugfix release
|
|
|
591a9d1 |
- Fix logrotation location (#1966955)
|
|
|
591a9d1 |
|
|
|
852c676 |
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com> - 6.0.2-2
|
|
|
852c676 |
- Rebuilt for Python 3.10
|
|
|
852c676 |
|
|
|
b6d1376 |
* Tue Mar 02 2021 Steve Grubb <sgrubb@redhat.com> 6.0.2-1
|
|
|
b6d1376 |
- New security and bugfix release
|
|
|
b6d1376 |
|
|
|
c3467ee |
* Sat Feb 13 2021 Miro Hrončok <mhroncok@redhat.com> - 6.0.1-4
|
|
|
ff7dfc2 |
- Enable hyperscan on EPEL 8+
|
|
|
ff7dfc2 |
|
|
|
5d34855 |
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.1-3
|
|
|
5d34855 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
5d34855 |
|
|
|
8096d96 |
* Thu Jan 07 2021 Steve Grubb <sgrubb@redhat.com> 6.0.1-2
|
|
|
540bed3 |
- New major feature release
|
|
|
4b42e0c |
- Dropped prelude support due to (#1908783).
|
|
|
540bed3 |
|
|
|
a842249 |
* Tue Dec 15 2020 Steve Grubb <sgrubb@redhat.com> 5.0.5-1
|
|
|
a842249 |
- New bugfix release
|
|
|
a842249 |
|
|
|
d018a60 |
* Thu Oct 15 2020 Steve Grubb <sgrubb@redhat.com> 5.0.4-1
|
|
|
d018a60 |
- New security and bugfix release
|
|
|
d018a60 |
- File ownership and location cleanups (#1861144)
|
|
|
d018a60 |
|
|
|
d7c1b78 |
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 5.0.3-3
|
|
|
d7c1b78 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
d7c1b78 |
|
|
|
f77c6f8 |
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 5.0.3-2
|
|
|
f77c6f8 |
- Rebuilt for Python 3.9
|
|
|
f77c6f8 |
|
|
|
cd922c6 |
* Tue Apr 28 2020 Jason Taylor <jtfas90@gmail.com> 5.0.3-1
|
|
|
cd922c6 |
- Upstream security/bugfix release
|
|
|
cd922c6 |
- Updated reference, classification, threshold config file installs
|
|
|
cd922c6 |
|
|
|
378f739 |
* Fri Apr 03 2020 Jason Taylor <jtfas90@gmail.com> 5.0.2-2
|
|
|
06626df |
- Add python3-pyyaml to resolve (#1818935)
|
|
|
06626df |
|
|
|
bb9d464 |
* Thu Feb 13 2020 Steve Grubb <sgrubb@redhat.com> 5.0.2-1
|
|
|
bb9d464 |
- New bugfix release
|
|
|
bb9d464 |
|
|
|
8ee3b09 |
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 5.0.1-2
|
|
|
8ee3b09 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
8ee3b09 |
|
|
|
de9d631 |
* Fri Dec 13 2019 Steve Grubb <sgrubb@redhat.com> 5.0.1-1
|
|
|
de9d631 |
- New bugfix release
|
|
|
de9d631 |
|
|
|
1f1dbb3 |
* Fri Oct 18 2019 Steve Grubb <sgrubb@redhat.com> 5.0.0-2
|
|
|
1adcd5f |
- New feature release (which also fixes a security issue)
|
|
|
4bcf6d9 |
- Enable ebpf on x86_64 only
|
|
|
1f1dbb3 |
- Disable building on ppc64le due to rust problems
|
|
|
1adcd5f |
|
|
|
fd72c2b |
* Thu Aug 01 2019 Steve Grubb <sgrubb@redhat.com> 4.1.4-4
|
|
|
fd72c2b |
- Fix FTBFS bz 1736727
|
|
|
fd72c2b |
|
|
|
44678e5 |
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.4-3
|
|
|
44678e5 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
44678e5 |
|
|
|
ebdeb2e |
* Mon Jul 22 2019 Steve Grubb <sgrubb@redhat.com> 4.1.4-2
|
|
|
ebdeb2e |
- Rebuild for libprelude so bump
|
|
|
ebdeb2e |
|
|
|
9ef1de2 |
* Tue Apr 30 2019 Jason Taylor <jtfas90@gmail.com> 4.1.4-1
|
|
|
9ef1de2 |
- Upstream bugfix release
|
|
|
9ef1de2 |
|
|
|
7b2cf3c |
* Thu Mar 07 2019 Steve Grubb <sgrubb@redhat.com> 4.1.3-1
|
|
|
7b2cf3c |
- Upstream bugfix release
|
|
|
7b2cf3c |
|
|
|
5a51536 |
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.2-2
|
|
|
5a51536 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
5a51536 |
|
|
|
6348471 |
* Fri Dec 21 2018 Jason Taylor <jtfas90@gmail.com> 4.1.2-1
|
|
|
6348471 |
- Upstream bugfix release
|
|
|
6348471 |
- Updated source to use official download site
|
|
|
6348471 |
|
|
|
02dc60e |
* Thu Dec 20 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-4
|
|
|
5588aee |
- Adjust permissions on /run/suricata and /var/lib/suricata to group writable
|
|
|
5588aee |
|
|
|
6ce5a65 |
* Mon Dec 17 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-2
|
|
|
6ce5a65 |
- Remove ragel requirement
|
|
|
6ce5a65 |
|
|
|
2e67f2b |
* Mon Dec 17 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-1
|
|
|
2e67f2b |
- Make log directory group readable
|
|
|
2e67f2b |
- Allow users of the suricata group to run suricata-update
|
|
|
2e67f2b |
- Add lz4-devel BuildRequires to support pcap compression
|
|
|
cfb3b99 |
- Update service file for systemd security protections
|
|
|
2e67f2b |
- Upstream bugfix update
|
|
|
2e67f2b |
|
|
|
d671f95 |
* Tue Nov 20 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-3
|
|
|
d671f95 |
- Use the upstream service and logrote files (#1330331)
|
|
|
d671f95 |
- Make the log directory readable by members of the suricata group (#1651394)
|
|
|
d671f95 |
|
|
|
e8d82fe |
* Wed Nov 07 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-2
|
|
|
e8d82fe |
- Add cargo BuildRequires
|
|
|
e8d82fe |
|
|
|
4686f00 |
* Tue Nov 06 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-1
|
|
|
4686f00 |
- Latest upstream major release
|
|
|
4686f00 |
- Fixes CVE-2018-18956 Segmentation fault in the ProcessMimeEntity function
|
|
|
4686f00 |
|
|
|
bbdc86b |
* Mon Aug 13 2018 Steve Grubb <sgrubb@redhat.com> - 4.0.5-3
|
|
|
7fe3cf7 |
- Consolidate branches so that everything is in sync (#1614935)
|
|
|
7fe3cf7 |
|
|
|
3cc8966 |
* Fri Aug 10 2018 Jason Taylor <jtfas90@gmail.com> 4.0.5-2
|
|
|
3cc8966 |
- fixes bz#1614935
|
|
|
3cc8966 |
|
|
|
0a83994 |
* Wed Jul 18 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.5-1
|
|
|
0a83994 |
- upstream security fix release
|
|
|
ca77bdc |
- addresses CVE-2018-10242, CVE-2018-10243, CVE-2018-10244
|
|
|
ca77bdc |
|
|
|
df98bb1 |
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.0.4-3
|
|
|
df98bb1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
df98bb1 |
|
|
|
6780932 |
* Mon Jul 09 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-2
|
|
|
6780932 |
- bumped release for build against hyperscan 5.0.0
|
|
|
6780932 |
|
|
|
1d67f86 |
* Mon Jul 09 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-1
|
|
|
1d67f86 |
- added gcc-c++ buildrequires
|
|
|
1d67f86 |
|
|
|
59ba250 |
* Thu Feb 15 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-1
|
|
|
da892c6 |
- fixes bz#1543250 and bz#1543251
|
|
|
da892c6 |
- multiple upstream bugfixes
|
|
|
da892c6 |
|
|
|
5eb1dd3 |
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.0.3-3
|
|
|
5eb1dd3 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
cd5c89d |
|
|
|
59ba250 |
* Mon Dec 11 2017 Jason Taylor <jtfas90@gmail.com> 4.0.3-2
|
|
|
a15b3fc |
- Added prelude support
|
|
|
a15b3fc |
|
|
|
ae1debc |
* Fri Dec 08 2017 Jason Taylor <jtfas90@gmail.com> 4.0.3-1
|
|
|
f25bef9 |
- Upstream bugfix release
|
|
|
f25bef9 |
|
|
|
a85ae7e |
* Wed Oct 18 2017 Steve Grubb <sgrubb@redhat.com> 4.0.1-1
|
|
|
a85ae7e |
- Upstream bugfix update
|
|
|
a85ae7e |
|
|
|
a7a5868 |
* Tue Sep 26 2017 Steve Grubb <sgrubb@redhat.com> 4.0.0-2
|
|
|
a7a5868 |
- Make suricata user own /run/suricata (#1396150)
|
|
|
a7a5868 |
|
|
|
715e2a7 |
* Mon Jul 31 2017 Jason Taylor <jtfas90@gmail.com> 4.0.0-1
|
|
|
715e2a7 |
- Latest upstream major release
|
|
|
715e2a7 |
- Build now has hyperscan and redis support
|
|
|
7eec7f8 |
|
|
|
e65ca7a |
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2.3-2
|
|
|
e65ca7a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
3781f6d |
|
|
|
72488dc |
* Thu Jul 13 2017 Jason Taylor <jtfas90@gmail.com> 3.2.3-1
|
|
|
72488dc |
- Upstream bugfix update
|
|
|
72488dc |
|
|
|
546e360 |
* Wed Jun 07 2017 Steve Grubb <sgrubb@redhat.com> 3.2.2-1
|
|
|
546e360 |
- Upstream bugfix update
|
|
|
546e360 |
|
|
|
41a7888 |
* Wed Feb 15 2017 Steve Grubb <sgrubb@redhat.com> 3.2.1-1
|
|
|
41a7888 |
- Upstream security update
|
|
|
41a7888 |
|
|
|
09a0253 |
* Mon Feb 13 2017 Steve Grubb <sgrubb@redhat.com> 3.2-1
|
|
|
09a0253 |
- New upstream feature release
|
|
|
09a0253 |
- Rotate /var/log/suricata/eve.json (#1396151)
|
|
|
09a0253 |
- Fix ownership of /run/suricata (#1396150)
|
|
|
09a0253 |
|
|
|
efe14bb |
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1.3-2
|
|
|
efe14bb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
efe14bb |
|
|
|
f36ec94 |
* Tue Nov 01 2016 Steve Grubb <sgrubb@redhat.com> 3.1.3-1
|
|
|
f36ec94 |
- New upstream bug fix release
|
|
|
f36ec94 |
|
|
|
f3961e6 |
* Wed Sep 07 2016 Steve Grubb <sgrubb@redhat.com> 3.1.2-1
|
|
|
f3961e6 |
- New upstream bug fix release
|
|
|
f3961e6 |
|
|
|
751bbd4 |
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.1-2
|
|
|
751bbd4 |
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
|
|
|
751bbd4 |
|
|
|
086d75b |
* Wed Jul 13 2016 Steve Grubb <sgrubb@redhat.com> 3.1.1-1
|
|
|
088bfec |
- New upstream bug fix release
|
|
|
088bfec |
|
|
|
5ff26f2 |
* Wed Jun 22 2016 Steve Grubb <sgrubb@redhat.com> 3.1-1
|
|
|
5ff26f2 |
- New upstream bug fix release
|
|
|
5ff26f2 |
|
|
|
e2787e4 |
* Mon Apr 04 2016 Steve Grubb <sgrubb@redhat.com> 3.0.1-1
|
|
|
e2787e4 |
- New upstream bug fix release
|
|
|
e2787e4 |
|
|
|
eddc26b |
* Wed Mar 16 2016 Steve Grubb <sgrubb@redhat.com> 3.0-2
|
|
|
eddc26b |
- Fixed Bug 1227085 - Have Suricata start after the network is online
|
|
|
eddc26b |
|
|
|
2ae3a89 |
* Mon Mar 07 2016 Steve Grubb <sgrubb@redhat.com> 3.0-1
|
|
|
2ae3a89 |
- New upstream bug fix release
|
|
|
2ae3a89 |
|
|
|
4dbb303 |
* Wed Feb 10 2016 Peter Schiffer <pschiffe@redhat.com> 2.0.11-3
|
|
|
4dbb303 |
- Run suricata under suricata user
|
|
|
4dbb303 |
|
|
|
f7cc661 |
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.11-2
|
|
|
f7cc661 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
f7cc661 |
|
|
|
4c74ec6 |
* Mon Dec 28 2015 Steve Grubb <sgrubb@redhat.com> 2.0.11-1
|
|
|
4c74ec6 |
- New upstream bug fix release
|
|
|
4c74ec6 |
|
|
|
0623dbf |
* Wed Nov 25 2015 Steve Grubb <sgrubb@redhat.com> 2.0.10-1
|
|
|
0623dbf |
- New upstream bug fix release
|
|
|
0623dbf |
|
|
|
64dceae |
* Sat Oct 03 2015 Steve Grubb <sgrubb@redhat.com> 2.0.9-1
|
|
|
64dceae |
- New upstream bug fix release
|
|
|
64dceae |
|
|
|
3dc63e0 |
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.8-2
|
|
|
3dc63e0 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
3dc63e0 |
|
|
|
c59f04a |
* Wed May 06 2015 Steve Grubb <sgrubb@redhat.com> 2.0.8-1
|
|
|
00b3501 |
- New upstream security bug fix release
|
|
|
00b3501 |
|
|
|
88f8f43 |
* Thu Feb 26 2015 Steve Grubb <sgrubb@redhat.com> 2.0.7-1
|
|
|
88f8f43 |
- New upstream security bug fix release for CVE-2015-0928
|
|
|
88f8f43 |
|
|
|
521c5b4 |
* Thu Jan 15 2015 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
|
|
|
521c5b4 |
- New upstream bug fix release
|
|
|
521c5b4 |
- Don't use the system libhtp library
|
|
|
521c5b4 |
|
|
|
affdefa |
* Fri Dec 12 2014 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
|
|
|
affdefa |
- New upstream bug fix release
|
|
|
affdefa |
- Use the system libhtp library
|
|
|
affdefa |
|
|
|
90398e9 |
* Wed Sep 24 2014 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
|
|
|
90398e9 |
- New upstream bug fix release
|
|
|
90398e9 |
- Fixes CVE-2014-6603 out-of-bounds access in SSH parser
|
|
|
90398e9 |
|
|
|
8e88615 |
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.3-2
|
|
|
8e88615 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
8e88615 |
|
|
|
61055d5 |
* Fri Aug 08 2014 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
|
|
|
61055d5 |
- New upstream bug fix release
|
|
|
61055d5 |
|
|
|
5b94559 |
* Sat Jun 28 2014 Steve Grubb <sgrubb@redhat.com> 2.0.2-2
|
|
|
5b94559 |
- Specfile cleanups (#1113413)
|
|
|
5b94559 |
|
|
|
e73eca8 |
* Wed Jun 25 2014 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
|
|
|
e73eca8 |
- New upstream bug fix release
|
|
|
e73eca8 |
- Enable liblua support
|
|
|
e73eca8 |
|
|
|
d7d41f7 |
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-2
|
|
|
d7d41f7 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
d7d41f7 |
|
|
|
4429907 |
* Wed May 21 2014 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
|
|
|
4429907 |
- New upstream bug fix release
|
|
|
4429907 |
|
|
|
d1b4434 |
* Wed Mar 26 2014 Steve Grubb <sgrubb@redhat.com> 2.0-1
|
|
|
d1b4434 |
- Major new upstream release with new features
|
|
|
d1b4434 |
|
|
|
4ade0ce |
* Tue Jan 21 2014 Dan Horák <dan[at]danny.cz> 1.4.7-3
|
|
|
4ade0ce |
- luajit available only on selected arches
|
|
|
4ade0ce |
|
|
|
6cbe8fa |
* Sat Jan 11 2014 Steve Grubb <sgrubb@redhat.com> 1.4.7-2
|
|
|
6cbe8fa |
- Enable luajit support
|
|
|
6cbe8fa |
|
|
|
083e75d |
* Wed Dec 18 2013 Steve Grubb <sgrubb@redhat.com> 1.4.7-1
|
|
|
083e75d |
- New upstream bug fix release
|
|
|
083e75d |
|
|
|
7344e7d |
* Fri Oct 04 2013 Steve Grubb <sgrubb@redhat.com> 1.4.6-1
|
|
|
7344e7d |
- New upstream bug fix release
|
|
|
7344e7d |
|
|
|
ee47642 |
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-3
|
|
|
ee47642 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
ee47642 |
|
|
|
8b8b63d |
* Fri Jun 21 2013 Steve Grubb <sgrubb@redhat.com> 1.4.3-2
|
|
|
8b8b63d |
- Drop prelude support
|
|
|
8b8b63d |
|
|
|
76588e1 |
* Fri Jun 21 2013 Steve Grubb <sgrubb@redhat.com> 1.4.3-1
|
|
|
76588e1 |
- New upstream bug fix release
|
|
|
76588e1 |
|
|
|
ef8356e |
* Mon Jun 03 2013 Steve Grubb <sgrubb@redhat.com> 1.4.2-1
|
|
|
ef8356e |
- New upstream bug fix release
|
|
|
ef8356e |
|
|
|
aad7f94 |
* Sun Mar 10 2013 Steve Grubb <sgrubb@redhat.com> 1.4.1-1
|
|
|
69e67b2 |
- New upstream bugfix release
|
|
|
69e67b2 |
- Enable libgeoip support
|
|
|
69e67b2 |
- Switch to stack-protector-all
|
|
|
69e67b2 |
|
|
|
ebabd26 |
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4-2
|
|
|
ebabd26 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
ebabd26 |
|
|
|
281f947 |
* Thu Dec 20 2012 Steve Grubb <sgrubb@redhat.com> 1.4-1
|
|
|
281f947 |
- New upstream feature enhancement release
|
|
|
281f947 |
|
|
|
73a0f2c |
* Thu Dec 06 2012 Steve Grubb <sgrubb@redhat.com> 1.3.5-1
|
|
|
73a0f2c |
- New upstream bugfix release
|
|
|
73a0f2c |
|
|
|
cd3f8ba |
* Tue Nov 27 2012 Steve Grubb <sgrubb@redhat.com> 1.3.4-1
|
|
|
cd3f8ba |
- New upstream release
|
|
|
cd3f8ba |
|
|
|
9f71bbc |
* Mon Nov 05 2012 Steve Grubb <sgrubb@redhat.com> 1.3.3-1
|
|
|
9f71bbc |
- New upstream release
|
|
|
9f71bbc |
|
|
|
2afa239 |
* Tue Oct 09 2012 Steve Grubb <sgrubb@redhat.com> 1.3.2-2
|
|
|
2afa239 |
- Add nss-devel build require and systemd macros
|
|
|
2afa239 |
|
|
|
65adc7c |
* Mon Oct 08 2012 Steve Grubb <sgrubb@redhat.com> 1.3.2-1
|
|
|
65adc7c |
- New upstream release
|
|
|
65adc7c |
|
|
|
a5bb759 |
* Sat Aug 25 2012 Steve Grubb <sgrubb@redhat.com> 1.3.1-1
|
|
|
a5bb759 |
- New upstream release
|
|
|
a5bb759 |
- Switch startup to use systemd
|
|
|
637e308 |
|
|
|
62eba71 |
* Fri Jul 06 2012 Steve Grubb <sgrubb@redhat.com> 1.3-1
|
|
|
62eba71 |
- New upstream release
|
|
|
62eba71 |
|
|
|
2a8e290 |
* Fri Mar 30 2012 Jon Ciesla <limburgher@gmail.com> - 1.2.1-3
|
|
|
2a8e290 |
- Rebuild for updated libnet.
|
|
|
2a8e290 |
|
|
|
4c6809b |
* Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 1.2.1-2
|
|
|
4c6809b |
- Rebuild against PCRE 8.30
|
|
|
4c6809b |
|
|
|
5512a33 |
* Thu Feb 02 2012 Steve Grubb <sgrubb@redhat.com> 1.2.1-1
|
|
|
5512a33 |
- New upstream release
|
|
|
5512a33 |
|
|
|
03c1e15 |
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.1-3
|
|
|
03c1e15 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
03c1e15 |
|
|
|
a60c033 |
* Thu Dec 22 2011 Steve Grubb <sgrubb@redhat.com> 1.1.1-2
|
|
|
a60c033 |
- Enable AF_PACKET support
|
|
|
a60c033 |
|
|
|
bf962db |
* Wed Dec 07 2011 Steve Grubb <sgrubb@redhat.com> 1.1.1-1
|
|
|
bf962db |
- New upstream release
|
|
|
bf962db |
|
|
|
7344e7d |
* Mon Jul 25 2011 Steve Grubb <sgrubb@redhat.com> 1.0.5-1
|
|
|
d6cb842 |
- New upstream release
|
|
|
d6cb842 |
|
|
|
b9b4a8d |
* Fri Jun 24 2011 Steve Grubb <sgrubb@redhat.com> 1.0.4-1
|
|
|
b9b4a8d |
- New upstream release
|
|
|
b9b4a8d |
|
|
|
c133104 |
* Thu Apr 28 2011 Dan Horák <dan[at]danny.cz> 1.0.3-2
|
|
|
c133104 |
- don't override -march set by the buildsystem (fixes build on non-x86)
|
|
|
c133104 |
|
|
|
32bac31 |
* Sat Apr 23 2011 Steve Grubb <sgrubb@redhat.com> 1.0.3-1
|
|
|
32bac31 |
- New upstream release
|
|
|
32bac31 |
|
|
|
aa3d515 |
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-2
|
|
|
aa3d515 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
aa3d515 |
|
|
Steve |
d33d467 |
* Wed Nov 10 2010 Steve Grubb <sgrubb@redhat.com> 1.0.2-1
|
|
Steve |
2008d76 |
- New upstream release (#651978)
|
|
Steve |
d33d467 |
|
|
|
66af920 |
* Thu Jul 01 2010 Steve Grubb <sgrubb@redhat.com> 1.0.0-1
|
|
|
66af920 |
- New upstream release
|
|
|
66af920 |
|
|
|
5a177ab |
* Fri May 07 2010 Steve Grubb <sgrubb@redhat.com> 0.9.0-1
|
|
|
5a177ab |
- New upstream release
|
|
|
5a177ab |
|
|
|
f510298 |
* Tue Apr 20 2010 Steve Grubb <sgrubb@redhat.com> 0.8.2-1
|
|
|
f510298 |
- New upstream release
|
|
|
f510298 |
|
|
|
78273e7 |
* Sat Feb 27 2010 Steve Grubb <sgrubb@redhat.com> 0.8.1-1
|
|
|
78273e7 |
- Initial packaging
|
|
|
78273e7 |
|