diff options
| -rw-r--r-- | packages/snort/snort.inc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/packages/snort/snort.inc b/packages/snort/snort.inc index 19660579..8773cac6 100644 --- a/packages/snort/snort.inc +++ b/packages/snort/snort.inc @@ -35,6 +35,7 @@ if($config['installedpackages']['snort']) function sync_package_snort() { global $config, $g, $snort_conf_file; + conf_mount_rw(); exec("/bin/mkdir -p /usr/local/etc/snort"); exec("/bin/mkdir -p /var/log/snort"); exec("/bin/cp /usr/local/etc/snort/unicode.map-sample /usr/local/etc/snort/unicode.map"); @@ -84,6 +85,7 @@ function sync_package_snort() { create_snort_conf(); /* start snort service */ + conf_mount_ro(); start_service("snort"); } @@ -91,6 +93,7 @@ function create_snort_conf() { global $config, $g, $snort_conf_file; /* write out snort.conf */ $snort_conf_text = generate_snort_conf(); + conf_mount_rw(); $conf = fopen($snort_conf_file, "w"); if(!$conf) { log_error("Could not open {$snort_conf_file} for writing."); @@ -98,10 +101,12 @@ function create_snort_conf() { } fwrite($conf, $snort_conf_text); fclose($conf); + conf_mount_ro(); } function generate_snort_conf() { global $config, $g, $snort_conf_file; + conf_mount_rw(); /* obtain external interface */ /* XXX: make multi wan friendly */ $snort_ext_int = $config['installedpackages']['snort']['config'][0]['iface_array'][0]; @@ -197,6 +202,8 @@ function generate_snort_conf() { $selected_rules_sections .= "include \$RULE_PATH/{$enabled_item}\n"; } + conf_mount_ro(); + /* build snort configuration file */ $snort_conf_text = <<<EOD |