aboutsummaryrefslogtreecommitdiffstats
path: root/config/suricata
diff options
context:
space:
mode:
authorbmeeks8 <bmeeks8@bellsouth.net>2014-09-04 16:37:24 -0400
committerbmeeks8 <bmeeks8@bellsouth.net>2014-09-04 16:37:24 -0400
commit2ad46791c5b1b2ad74a5119fee13086b9480fcea (patch)
treefe0a701a3df36c984a2975184aeb944b9aa7272f /config/suricata
parent46ba3729b4bbf7dd321fc3555677a66c67f4c784 (diff)
downloadpfsense-packages-2ad46791c5b1b2ad74a5119fee13086b9480fcea.tar.gz
pfsense-packages-2ad46791c5b1b2ad74a5119fee13086b9480fcea.tar.bz2
pfsense-packages-2ad46791c5b1b2ad74a5119fee13086b9480fcea.zip
Prevent setting filesystem to read-only during post-install rule update.
Diffstat (limited to 'config/suricata')
-rw-r--r--config/suricata/suricata_check_for_rule_updates.php6
1 files changed, 5 insertions, 1 deletions
diff --git a/config/suricata/suricata_check_for_rule_updates.php b/config/suricata/suricata_check_for_rule_updates.php
index 6a3e51f7..eeb7be6c 100644
--- a/config/suricata/suricata_check_for_rule_updates.php
+++ b/config/suricata/suricata_check_for_rule_updates.php
@@ -762,7 +762,11 @@ if ($pkg_interface <> "console") {
}
log_error(gettext("[Suricata] The Rules update has finished."));
error_log(gettext("The Rules update has finished. Time: " . date("Y-m-d H:i:s"). "\n\n"), 3, $suricata_rules_upd_log);
-conf_mount_ro();
+
+// Remount filesystem read-only unless we are in package post-install.
+// The post-install code will remount read-only when it completes.
+if (!$g['suricata_postinstall'])
+ conf_mount_ro();
// Restore the state of $pkg_interface
$pkg_interface = $pkg_interface_orig;