mnhauke
04a93c3822
* CVE-2026-45764: CRITICAL
* CVE-2026-45766: CRITICAL
* CVE-2026-45769: CRITICAL
* CVE-2026-45768: CRITICAL
* CVE-2026-46387: HIGH
* CVE-2026-45759: HIGH
* CVE-2026-45762: HIGH
* CVE-2026-45765: HIGH
* CVE-2026-45770: HIGH
* CVE-2026-46352: HIGH
* CVE-2026-45767: HIGH
* CVE-2026-45763: HIGH
* CVE-2026-45751: MODERATE
* CVE-2026-45752: MODERATE
* CVE-2026-45761: LOW
* All tickets available at:
https://redmine.openinfosecfoundation.org/versions/233
- Implement security hardening and non-privileged execution:
* Implement static system user 'suricata' via sysuser-tools.
* Hardened systemd service
* Updated logrotate to use 'su suricata suricata'.
* Restricted permissions for /var/log/suricata and
/var/lib/suricata (0750).
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/suricata?expand=0&rev=38
10 lines
386 B
Plaintext
10 lines
386 B
Plaintext
## Path: Network/Security
|
|
## Description: suricata configuration
|
|
## Type: string(-i,-q,-l)
|
|
## Default: "-c /etc/suricata/suricata.yaml -i eth0"
|
|
## ServiceRestart: suricata
|
|
# Parameters for suricata. See the manual page for the
|
|
# accepted parameters.
|
|
# IMPORTANT: Use absolute paths as the service runs as a non-privileged user.
|
|
SURICATA_OPTIONS="-c /etc/suricata/suricata.yaml -i eth0"
|