From 685ff038147f42acabcdd419382c31c125611565 Mon Sep 17 00:00:00 2001 From: Clayton Casciato Date: Mon, 22 Sep 2025 09:04:22 -0600 Subject: [PATCH] suricata-update: add package to pull files suricata has "--disable-suricata-update" Original add: caaeb67863a6 ("suricata-update: add package to pull rules") Suricata dropped: 7a1691c03726 ("suricata: Drop 4.1.x its EOL") Not readded: 818a8646a689 ("suricata: rust is in core") *Changes* 1.2.1 -> 1.3.6 Drop period and trailing space in SUMMARY value Drop now-redundant "S" Use HTTPS protocol for SRC_URI LICENSE "GPLv2" -> "GPL-2.0-only" Add "python3-shell" RDEPENDS to resolve: ModuleNotFoundError: No module named 'shlex' Basic target testing: root@beaglebone-yocto:~# suricata-update 22/9/2025 -- 04:06:23 - -- Using data-directory /var/lib/suricata. 22/9/2025 -- 04:06:23 - -- Using Suricata configuration /etc/suricata/suricata.yaml 22/9/2025 -- 04:06:23 - -- Using /usr/share/suricata/rules for Suricata provided rules. 22/9/2025 -- 04:06:23 - -- Found Suricata version 7.0.0 at /bin/suricata. 22/9/2025 -- 04:06:23 - -- Loading /etc/suricata/suricata.yaml 22/9/2025 -- 04:06:23 - -- Disabling rules for protocol pgsql 22/9/2025 -- 04:06:23 - -- Disabling rules for protocol modbus 22/9/2025 -- 04:06:23 - -- Disabling rules for protocol dnp3 22/9/2025 -- 04:06:23 - -- Disabling rules for protocol enip 22/9/2025 -- 04:06:23 - -- No sources configured, will use Emerging Threats Open 22/9/2025 -- 04:06:23 - -- Fetching https://rules.emergingthreats.net/open/suricata-7.0.0/emerging.rules.tar.gz. 100% - 5102134/5102134 22/9/2025 -- 04:06:24 - -- Done. 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/app-layer-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/decoder-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/dhcp-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/dnp3-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/dns-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/files.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/http2-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/http-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/ipsec-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/kerberos-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/modbus-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/mqtt-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/nfs-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/ntp-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/quic-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/rfb-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/smb-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/smtp-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/ssh-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/stream-events.rules 22/9/2025 -- 04:06:25 - -- Loading distribution rule file /usr/share/suricata/rules/tls-events.rules 22/9/2025 -- 04:06:27 - -- Ignoring file ba1345f233851ca2df4d905ea4b386d2/rules/emerging-deleted.rules 22/9/2025 -- 04:06:57 - -- Loaded 61205 rules. 22/9/2025 -- 04:07:02 - -- Disabled 14 rules. 22/9/2025 -- 04:07:02 - -- Enabled 0 rules. 22/9/2025 -- 04:07:02 - -- Modified 0 rules. 22/9/2025 -- 04:07:02 - -- Dropped 0 rules. 22/9/2025 -- 04:07:03 - -- Enabled 136 rules for flowbit dependencies. 22/9/2025 -- 04:07:03 - -- Creating directory /var/lib/suricata/rules. 22/9/2025 -- 04:07:03 - -- Backing up current rules. 22/9/2025 -- 04:07:03 - -- Writing rules to /var/lib/suricata/rules/suricata.rules: total: 61205; enabled: 45406; added: 61205; removed 0; modified: 0 22/9/2025 -- 04:07:06 - -- Writing /var/lib/suricata/rules/classification.config 22/9/2025 -- 04:07:07 - -- Testing with suricata -T. 22/9/2025 -- 04:07:57 - -- Done. Signed-off-by: Clayton Casciato --- .../suricata/python3-suricata-update_1.3.6.bb | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 recipes-ids/suricata/python3-suricata-update_1.3.6.bb diff --git a/recipes-ids/suricata/python3-suricata-update_1.3.6.bb b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb new file mode 100644 index 0000000..cdf2faa --- /dev/null +++ b/recipes-ids/suricata/python3-suricata-update_1.3.6.bb @@ -0,0 +1,15 @@ +SUMMARY = "The tool for updating your Suricata rules" +HOMEPAGE = "http://suricata-ids.org/" +SECTION = "security Monitor/Admin" +LICENSE = "GPL-2.0-only" + +LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=c70d8d3310941dcdfcd1e02800a1f548" + +SRCREV = "f76a61bdee69961537585a1036c4294da28495a5" +SRC_URI = "git://github.com/OISF/suricata-update;protocol=https;branch=master" + +inherit python3native python3targetconfig setuptools3 + +RDEPENDS:${PN} = "python3-pyyaml python3-logging python3-compression python3-shell" + +BBCLASSEXTEND = "native nativesdk"