You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide
Victor Julien 34f53f85bc systemd: reimplement sd_notify logic using UNIX socket
One of the lessons of the XZ backdoor story was that just linking to
libsystemd to call sd_notify is discouraged by the systemd project:

Lennart Poettering:
"PSA: In context of the xzpocalypse we now added an example reimplementation
of sd_notify() to our man page:

https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html#Notes

It's pretty comprehensive (i.e. uses it for reload notification too), but
still relatively short.

In the past, I have been telling anyone who wanted to listen that if all you
want is sd_notify() then don't bother linking to libsystemd, since the
protocol is stable and should be considered the API, not our C wrapper
around it. After all, the protocol is so trivial"

From: https://mastodon.social/@pid_eins/112202687764571433

This commit takes the example code and uses it to reimplement the notify
logic.

The code is enabled if Linux is detected in configure. Since the code
won't do anything if the NOTIFY_SOCKET env var isn't set, this should
also work fine on systems w/o systemd.

Ticket: #6913.
1 year ago
..
3rd-party-integration
_static doc/userguide: avoid horizontal scroll on rtd 2 years ago
capture-hardware dpdk: add interrupt (power-saving) mode 2 years ago
configuration systemd: reimplement sd_notify logic using UNIX socket 1 year ago
devguide devguide: add an upgrade section 1 year ago
file-extraction doc/userguide: spelling 2 years ago
licenses
lua doc/userguide: improve SCStreamingBuffer example 2 years ago
manpages doc/userguide: spelling 2 years ago
output doc: remove references to prehistoric versions 2 years ago
partials doc/userguide: add reload-tenant(s) doc 2 years ago
performance doc/userguide: update ref to installation from git 2 years ago
reputation doc: spelling 2 years ago
rule-management doc/rule-profiling: fix suricatasc typo 2 years ago
rules dns: add dns.rcode keyword 1 year ago
setting-up-ipsinline-for-linux
upgrade doc: document removal of unified2 5 years ago
.gitignore
Makefile.am docs/userguide: use a consistent date for reproducible builds 1 year ago
Makefile.sphinx
README.md devguide: move into userguide as last chapter 3 years ago
acknowledgements.rst doc/acknowledgements: add a few more names 3 years ago
command-line-options.rst doc: Improve grammar, spelling and clarifications 5 years ago
conf.py docs/userguide: use a consistent date for reproducible builds 1 year ago
convert.py doc/optimization: move "convert.py" to Python3 2 years ago
docutils.conf doc: add docutils.conf to disable smart quotes 2 years ago
index.rst doc/userguide: display version on front page 2 years ago
initscripts.rst doc: Improve grammar, spelling and clarifications 5 years ago
install.rst config/nss: Remove libnspr/libnss traces 1 year ago
make-sense-alerts.rst doc: Improve grammar, spelling and clarifications 5 years ago
public-data-sets.rst userguide: update wiresharkwiki in public datasets 4 years ago
quickstart.rst doc/quickstart: add software-properties instruction 2 years ago
requirements.txt docs: adjust readthedocs config to new options 2 years ago
security.rst userguide/security: grammar fixes 2 years ago
setting-up-ipsinline-for-linux.rst doc: fix description of iptables rules 2 years ago
setting-up-ipsinline-for-windows.rst doc: Improve grammar, spelling and clarifications 5 years ago
support-status.rst devguide: make 'contributing' a chapter 2 years ago
unix-socket.rst suricatasc: update running instructions 2 years ago
upgrade.rst doc: add upgrade section for 8 1 year ago
what-is-suricata.rst doc: Improve grammar, spelling and clarifications 5 years ago

README.md

Suricata User Guide

This directory contains the Suricata Guide. The Suricata Developer's guide is included as a chapter of the Guide. The Sphinx Document Generator is used to build the documentation. For a primer os reStructuredText see the reStructuredText Primer.

Verifying Changes

There are a number of output formats to choose from when making the source documentation locally (e.g. html, pdf, man).

The documentation source can be built with make -f Makefile.sphinx html. Substitute the 'html' word for desired output format.

There are different application dependencies based on the output desired.