From b3690f7345eb7f2dc0b5832972f9793eeb63c5c5 Mon Sep 17 00:00:00 2001 From: bmeeks8 Date: Thu, 18 Sep 2014 21:13:23 -0400 Subject: Add new shell script for starting Snort package. --- config/snort/snort_service_utils.php | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'config/snort/snort_service_utils.php') diff --git a/config/snort/snort_service_utils.php b/config/snort/snort_service_utils.php index f04987b2..a40260d3 100644 --- a/config/snort/snort_service_utils.php +++ b/config/snort/snort_service_utils.php @@ -65,6 +65,12 @@ foreach ($config['installedpackages']['snortglobal']['rule'] as $rule) { if ($rule['uuid'] == $uuid) { $if_real = get_real_interface($rule['interface']); + // Block changes when package is being started from shell script + if (file_exists("{$g['varrun_path']}/snort_pkg_starting.lck") { + log_error(gettext("[Snort] interface service start/stop commands locked-out during package start/restart.")); + return TRUE; + } + // If interface is manually stopped, then don't try to start it if (($action == 'start' || $action == 'restart') && file_exists("{$g['varrun_path']}/{$service}_{$uuid}.disabled")) { log_error(gettext("[Snort] auto-start locked out by previous manual shutdown...must be started using Snort INTERFACES tab.")); -- cgit v1.2.3