upstream/opnsense-core
1
0
Fork 0
mirror of https://github.com/opnsense/core.git synced 2026-06-08 16:34:24 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

intrusion detection: remove removed algo

Browse source
This commit is contained in:
Franco Fichtner 2025-09-18 09:41:10 +02:00
parent bd5b3fceca
commit 9bb804252e
4 changed files with 50 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
plist
View file

@ -751,6 +751,7 @@
/usr/local/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_0_2.php
/usr/local/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_0_6.php
/usr/local/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_0_7.php
/usr/local/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_1_1.php
/usr/local/opnsense/mvc/app/models/OPNsense/IPsec/ACL/ACL.xml
/usr/local/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/CharonLogLevelField.php
/usr/local/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/ConnnectionField.php

3
src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
View file

@ -1,6 +1,6 @@
<model>
<mount>//OPNsense/IDS</mount>
<version>1.1.0</version>
<version>1.1.1</version>
<description>Intrusion detection</description>
<items>
<rules>
@ -195,7 +195,6 @@
<BlankDesc>Default</BlankDesc>
<OptionValues>
<ac>Aho-Corasick</ac>
<ac-bs>Aho-Corasick, reduced memory implementation</ac-bs>
<ac-ks>Aho-Corasick, "Ken Steele" variant</ac-ks>
<hs>Hyperscan</hs>
</OptionValues>

48
src/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_1_1.php Normal file
View file

@ -0,0 +1,48 @@
<?php
/*
* Copyright (C) 2025 Deciso B.V.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are met:
*
* 1. Redistributions of source code must retain the above copyright notice,
* this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
* AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
* AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
* OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/
namespace OPNsense\IDS\Migrations;
use OPNsense\Base\BaseModelMigration;
use OPNSense\IDS\IDS;
class M1_1_1 extends BaseModelMigration
{
/**
* Migrations for version 8
* @param IDS $model
*/
public function run($model)
{
if ($model->general->MPMAlgo->isEqual('ac-bs')) {
$model->general->MPMAlgo = '';
}
parent::run($model);
}
}

1
src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
View file

@ -1745,7 +1745,6 @@ detect:
#
# The supported algorithms are:
# "ac" - Aho-Corasick, default implementation
# "ac-bs" - Aho-Corasick, reduced memory implementation
# "ac-ks" - Aho-Corasick, "Ken Steele" variant
# "hs" - Hyperscan, available when built with Hyperscan support
#