aboutsummaryrefslogtreecommitdiffstats
path: root/config/snort/snort_rulesets.php
diff options
context:
space:
mode:
authorbmeeks8 <bmeeks8@bellsouth.net>2014-01-12 00:25:54 -0500
committerbmeeks8 <bmeeks8@bellsouth.net>2014-01-12 00:25:54 -0500
commitc3b3ace436cfc9f0cc0ea7e5909c58582b7ed658 (patch)
tree123a04e6d47eb099d570682c142e6f93922a3e2e /config/snort/snort_rulesets.php
parentba3edc934faf8887fd5ea9e785392d84f2cd288c (diff)
downloadpfsense-packages-c3b3ace436cfc9f0cc0ea7e5909c58582b7ed658.tar.gz
pfsense-packages-c3b3ace436cfc9f0cc0ea7e5909c58582b7ed658.tar.bz2
pfsense-packages-c3b3ace436cfc9f0cc0ea7e5909c58582b7ed658.zip
Ensure conf_mount_rw() and conf_mount_ro() are used where needed.
Diffstat (limited to 'config/snort/snort_rulesets.php')
-rwxr-xr-xconfig/snort/snort_rulesets.php6
1 files changed, 5 insertions, 1 deletions
diff --git a/config/snort/snort_rulesets.php b/config/snort/snort_rulesets.php
index 62b68a1b..dc37cb10 100755
--- a/config/snort/snort_rulesets.php
+++ b/config/snort/snort_rulesets.php
@@ -118,7 +118,6 @@ if ($a_nat[$id]['ips_policy_enable'] == 'on') {
else
$disable_vrt_rules = "";
-/* alert file */
if ($_POST["Submit"]) {
if ($_POST['ips_policy_enable'] == "on") {
@@ -146,6 +145,7 @@ if ($_POST["Submit"]) {
@unlink("{$snortdir}/snort_{$snort_uuid}_{$if_real}/rules/{$flowbit_rules_file}");
}
+ conf_mount_rw();
write_config();
/*************************************************/
@@ -155,6 +155,10 @@ if ($_POST["Submit"]) {
$rebuild_rules = true;
snort_generate_conf($a_nat[$id]);
$rebuild_rules = false;
+ conf_mount_ro();
+
+ /* Soft-restart Snort to live-load new rules */
+ snort_reload_config($a_nat[$id]);
header("Location: /snort/snort_rulesets.php?id=$id");
exit;