aboutsummaryrefslogtreecommitdiffstats
path: root/config/snort
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2012-07-22 18:45:30 +0000
committerErmal <eri@pfsense.org>2012-07-22 18:46:08 +0000
commit1fba01c6b7ed109729a8bffa629c8900d6fdd78a (patch)
tree2c02cbe785f4e5a0e4d6d6207a4ea1fa2e535fd8 /config/snort
parent4b4248be5bfacf56e10c168311c7d82d490ee951 (diff)
downloadpfsense-packages-1fba01c6b7ed109729a8bffa629c8900d6fdd78a.tar.gz
pfsense-packages-1fba01c6b7ed109729a8bffa629c8900d6fdd78a.tar.bz2
pfsense-packages-1fba01c6b7ed109729a8bffa629c8900d6fdd78a.zip
Remove files that are not selected under categories
Diffstat (limited to 'config/snort')
-rw-r--r--config/snort/snort_rulesets.php34
1 files changed, 28 insertions, 6 deletions
diff --git a/config/snort/snort_rulesets.php b/config/snort/snort_rulesets.php
index 3d6de228..9af5354d 100644
--- a/config/snort/snort_rulesets.php
+++ b/config/snort/snort_rulesets.php
@@ -49,6 +49,22 @@ if (is_null($id)) {
exit;
}
+function snort_remove_rules($files, $snortdir, $snort_uuid, $if_real) {
+
+ if (empty($files))
+ return;
+
+ conf_mount_rw();
+ foreach ($tormv as $file) {
+ @unlink("{$snortdir}/snort_{$snort_uuid}_{$if_real}/rules/{$file}");
+ if (substr($file, -9) == ".so.rules") {
+ $slib = substr($enabled_item, 6, -6);
+ @unlink("{$snortdir}/snort_{$snort_uuid}_{$if_real}/dynamicrules/{$slib}");
+ }
+ }
+ conf_mount_ro();
+}
+
function snort_copy_rules($files, $snortdir, $snort_uuid, $if_real) {
if (empty($files))
@@ -58,6 +74,11 @@ function snort_copy_rules($files, $snortdir, $snort_uuid, $if_real) {
foreach ($files as $file) {
if (!file_exists("{$snortdir}/snort_{$snort_uuid}_{$if_real}/rules/{$file}"))
@copy("{$snortdir}/rules/{$file}", "{$snortdir}/snort_{$snort_uuid}_{$if_real}/rules/{$file}");
+ if (substr($file, -9) == ".so.rules") {
+ $slib = substr($enabled_item, 6, -6);
+ if (!file_exists("{$snortdir}/snort_{$snort_uuid}_{$if_real}/dynamicrules/{$slib}"))
+ @copy("/usr/local/lib/snort/dynamicrules/{$file}", "{$snortdir}/snort_{$snort_uuid}_{$if_real}/dynamicrules/{$slib}");
+ }
}
conf_mount_ro();
}
@@ -80,6 +101,11 @@ if ($_POST["Submit"]) {
$enabled_items = implode("||", $_POST['toenable']);
else
$enabled_items = $_POST['toenable'];
+
+ $oenabled = explode("||", $a_nat[$id]['rulesets']);
+ $nenabled = explode("||", $enabled_items);
+ $tormv = arrad_diff($oenabled, $nenabled);
+ snort_remove_rules($tormv, $snortdir, $snort_uuid, $if_real);
$a_nat[$id]['rulesets'] = $enabled_items;
snort_copy_rules(explode("||", $enabled_items), $snortdir, $snort_uuid, $if_real);
@@ -91,12 +117,8 @@ if ($_POST["Submit"]) {
}
if ($_POST['unselectall']) {
- if (!empty($pconfig['rulesets'])) {
- conf_mount_rw();
- foreach (explode("||", $pconfig['rulesets']) as $file)
- @unlink("{$snortdir}/snort_{$snort_uuid}_{$if_real}/rules/{$file}");
- conf_mount_ro();
- }
+ if (!empty($pconfig['rulesets']))
+ snort_remove_rules(explode("||", $pconfig['rulesets']), $snortdir, $snort_uuid, $if_real);
$a_nat[$id]['rulesets'] = "";