diff mbox series

[meta-security,v2] suricata-update: add package to pull files

Message ID fc0c6979-568e-47a1-9906-f93e58312147@gmail.com
State New
Headers show
Series [meta-security,v2] suricata-update: add package to pull files | expand

Commit Message

Clayton Casciato Sept. 22, 2025, 3:04 p.m. UTC 
suricata has "--disable-suricata-update"

Original add: caaeb67863a6 ("suricata-update: add package to pull rules")
Suricata dropped: 7a1691c03726 ("suricata: Drop 4.1.x its EOL")
Not readded: 818a8646a689 ("suricata: rust is in core")

*Changes*
1.2.1 -> 1.3.6
Drop period and trailing space in SUMMARY value
Drop now-redundant "S"
Use HTTPS protocol for SRC_URI
LICENSE "GPLv2" -> "GPL-2.0-only"
Add "python3-shell" RDEPENDS to resolve:
  ModuleNotFoundError: No module named 'shlex'

Basic target testing:
root@beaglebone-yocto:~# suricata-update
22/9/2025 -- 04:06:23 - <Info> -- Using data-directory /var/lib/suricata.
22/9/2025 -- 04:06:23 - <Info> -- Using Suricata configuration /etc/suricata/suricata.yaml
22/9/2025 -- 04:06:23 - <Info> -- Using /usr/share/suricata/rules for Suricata provided rules.
22/9/2025 -- 04:06:23 - <Info> -- Found Suricata version 7.0.0 at /bin/suricata.
22/9/2025 -- 04:06:23 - <Info> -- Loading /etc/suricata/suricata.yaml
22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol pgsql
22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol modbus
22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol dnp3
22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol enip
22/9/2025 -- 04:06:23 - <Info> -- No sources configured, will use Emerging Threats Open
22/9/2025 -- 04:06:23 - <Info> -- Fetching https://rules.emergingthreats.net/open/suricata-7.0.0/emerging.rules.tar.gz.
 100% - 5102134/5102134
22/9/2025 -- 04:06:24 - <Info> -- Done.
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/app-layer-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/decoder-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/dhcp-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/dnp3-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/dns-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/files.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/http2-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/http-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/ipsec-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/kerberos-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/modbus-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/mqtt-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/nfs-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/ntp-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/quic-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/rfb-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/smb-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/smtp-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/ssh-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/stream-events.rules
22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file /usr/share/suricata/rules/tls-events.rules
22/9/2025 -- 04:06:27 - <Info> -- Ignoring file ba1345f233851ca2df4d905ea4b386d2/rules/emerging-deleted.rules
22/9/2025 -- 04:06:57 - <Info> -- Loaded 61205 rules.
22/9/2025 -- 04:07:02 - <Info> -- Disabled 14 rules.
22/9/2025 -- 04:07:02 - <Info> -- Enabled 0 rules.
22/9/2025 -- 04:07:02 - <Info> -- Modified 0 rules.
22/9/2025 -- 04:07:02 - <Info> -- Dropped 0 rules.
22/9/2025 -- 04:07:03 - <Info> -- Enabled 136 rules for flowbit dependencies.
22/9/2025 -- 04:07:03 - <Info> -- Creating directory /var/lib/suricata/rules.
22/9/2025 -- 04:07:03 - <Info> -- Backing up current rules.
22/9/2025 -- 04:07:03 - <Info> -- Writing rules to /var/lib/suricata/rules/suricata.rules: total: 61205; enabled: 45406; added: 61205; removed 0; modified: 0
22/9/2025 -- 04:07:06 - <Info> -- Writing /var/lib/suricata/rules/classification.config
22/9/2025 -- 04:07:07 - <Info> -- Testing with suricata -T.
22/9/2025 -- 04:07:57 - <Info> -- Done.

Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
---

Sponsor: 21SoftWare LLC

v2: 1.3.4 -> 1.3.6, drop "S", document target test results
v1: https://lists.yoctoproject.org/g/yocto-patches/message/1569

 .../suricata/python3-suricata-update_1.3.6.bb     | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 recipes-ids/suricata/python3-suricata-update_1.3.6.bb

Comments

Marta Rybczynska Sept. 30, 2025, 4:20 a.m. UTC | #1 
Hello,
Thank you for the patch, I take it to my testing branch.

Kind regards,
Marta

On Mon, Sep 22, 2025 at 5:04 PM Clayton Casciato <
majortomtosourcecontrol@gmail.com> wrote:

> suricata has "--disable-suricata-update"
>
> Original add: caaeb67863a6 ("suricata-update: add package to pull rules")
> Suricata dropped: 7a1691c03726 ("suricata: Drop 4.1.x its EOL")
> Not readded: 818a8646a689 ("suricata: rust is in core")
>
> *Changes*
> 1.2.1 -> 1.3.6
> Drop period and trailing space in SUMMARY value
> Drop now-redundant "S"
> Use HTTPS protocol for SRC_URI
> LICENSE "GPLv2" -> "GPL-2.0-only"
> Add "python3-shell" RDEPENDS to resolve:
>   ModuleNotFoundError: No module named 'shlex'
>
> Basic target testing:
> root@beaglebone-yocto:~# suricata-update
> 22/9/2025 -- 04:06:23 - <Info> -- Using data-directory /var/lib/suricata.
> 22/9/2025 -- 04:06:23 - <Info> -- Using Suricata configuration
> /etc/suricata/suricata.yaml
> 22/9/2025 -- 04:06:23 - <Info> -- Using /usr/share/suricata/rules for
> Suricata provided rules.
> 22/9/2025 -- 04:06:23 - <Info> -- Found Suricata version 7.0.0 at
> /bin/suricata.
> 22/9/2025 -- 04:06:23 - <Info> -- Loading /etc/suricata/suricata.yaml
> 22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol pgsql
> 22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol modbus
> 22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol dnp3
> 22/9/2025 -- 04:06:23 - <Info> -- Disabling rules for protocol enip
> 22/9/2025 -- 04:06:23 - <Info> -- No sources configured, will use Emerging
> Threats Open
> 22/9/2025 -- 04:06:23 - <Info> -- Fetching
> https://rules.emergingthreats.net/open/suricata-7.0.0/emerging.rules.tar.gz
> .
>  100% - 5102134/5102134
> 22/9/2025 -- 04:06:24 - <Info> -- Done.
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/app-layer-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/decoder-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/dhcp-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/dnp3-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/dns-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/files.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/http2-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/http-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/ipsec-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/kerberos-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/modbus-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/mqtt-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/nfs-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/ntp-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/quic-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/rfb-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/smb-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/smtp-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/ssh-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/stream-events.rules
> 22/9/2025 -- 04:06:25 - <Info> -- Loading distribution rule file
> /usr/share/suricata/rules/tls-events.rules
> 22/9/2025 -- 04:06:27 - <Info> -- Ignoring file
> ba1345f233851ca2df4d905ea4b386d2/rules/emerging-deleted.rules
> 22/9/2025 -- 04:06:57 - <Info> -- Loaded 61205 rules.
> 22/9/2025 -- 04:07:02 - <Info> -- Disabled 14 rules.
> 22/9/2025 -- 04:07:02 - <Info> -- Enabled 0 rules.
> 22/9/2025 -- 04:07:02 - <Info> -- Modified 0 rules.
> 22/9/2025 -- 04:07:02 - <Info> -- Dropped 0 rules.
> 22/9/2025 -- 04:07:03 - <Info> -- Enabled 136 rules for flowbit
> dependencies.
> 22/9/2025 -- 04:07:03 - <Info> -- Creating directory
> /var/lib/suricata/rules.
> 22/9/2025 -- 04:07:03 - <Info> -- Backing up current rules.
> 22/9/2025 -- 04:07:03 - <Info> -- Writing rules to
> /var/lib/suricata/rules/suricata.rules: total: 61205; enabled: 45406;
> added: 61205; removed 0; modified: 0
> 22/9/2025 -- 04:07:06 - <Info> -- Writing
> /var/lib/suricata/rules/classification.config
> 22/9/2025 -- 04:07:07 - <Info> -- Testing with suricata -T.
> 22/9/2025 -- 04:07:57 - <Info> -- Done.
>
> Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
> ---
>
> Sponsor: 21SoftWare LLC
>
> v2: 1.3.4 -> 1.3.6, drop "S", document target test results
> v1: https://lists.yoctoproject.org/g/yocto-patches/message/1569
>
>  .../suricata/python3-suricata-update_1.3.6.bb     | 15 +++++++++++++++
>  1 file changed, 15 insertions(+)
>  create mode 100644 recipes-ids/suricata/python3-suricata-update_1.3.6.bb
>
> diff --git a/recipes-ids/suricata/python3-suricata-update_1.3.6.bb
> b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb
> new file mode 100644
> index 0000000..cdf2faa
> --- /dev/null
> +++ b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb
> @@ -0,0 +1,15 @@
> +SUMMARY = "The tool for updating your Suricata rules"
> +HOMEPAGE = "http://suricata-ids.org/"
> +SECTION = "security Monitor/Admin"
> +LICENSE = "GPL-2.0-only"
> +
> +LIC_FILES_CHKSUM =
> "file://LICENSE;beginline=1;endline=2;md5=c70d8d3310941dcdfcd1e02800a1f548"
> +
> +SRCREV = "f76a61bdee69961537585a1036c4294da28495a5"
> +SRC_URI = "git://
> github.com/OISF/suricata-update;protocol=https;branch=master"
> +
> +inherit python3native python3targetconfig setuptools3
> +
> +RDEPENDS:${PN} = "python3-pyyaml python3-logging python3-compression
> python3-shell"
> +
> +BBCLASSEXTEND = "native nativesdk"
>
diff mbox series

Patch

diff --git a/recipes-ids/suricata/python3-suricata-update_1.3.6.bb b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb
new file mode 100644
index 0000000..cdf2faa
--- /dev/null
+++ b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb
@@ -0,0 +1,15 @@ 
+SUMMARY = "The tool for updating your Suricata rules"
+HOMEPAGE = "http://suricata-ids.org/"
+SECTION = "security Monitor/Admin"
+LICENSE = "GPL-2.0-only"
+
+LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=c70d8d3310941dcdfcd1e02800a1f548"
+
+SRCREV = "f76a61bdee69961537585a1036c4294da28495a5"
+SRC_URI = "git://github.com/OISF/suricata-update;protocol=https;branch=master"
+
+inherit python3native python3targetconfig setuptools3
+
+RDEPENDS:${PN} = "python3-pyyaml python3-logging python3-compression python3-shell"
+
+BBCLASSEXTEND = "native nativesdk"