oinkmaster daily cron: run oinkmaster as non-root user suricata; also…

… disable

download of Snort community rule due to a file conflict with ET rules
(sid-msg.map): needs to be sorted out later

Signed-off-by: KheOps <kheops@ceops.eu>

roles/common/files/etc/cron.daily/oinkmaster

@@ -1,7 +1,9 @@
 #!/bin/sh
 
+OINK=/usr/sbin/oinkmaster
 TMPFILE=$(mktemp)
-(oinkmaster -C /etc/oinkmaster/oinkmaster.conf -o /etc/snort/rules -Q; \
- oinkmaster -C /etc/oinkmaster/oinkmaster-snort-community.conf -o /etc/snort/rules -Q) | tee $TMPFILE
+su -s /bin/bash -c "$OINK -C /etc/oinkmaster/oinkmaster.conf -o /etc/snort/rules -Q" suricata
+# Note: Snort community rules disabled due to conflict of sid-msg.map file
+#su -s /bin/bash -c "$OINK -C /etc/oinkmaster/oinkmaster-snort-community.conf -o /etc/snort/rules -Q" suricata
 test -s $TMPFILE && echo Suricata rules changed: restarting Suricata && service suricata restart
 rm -f $TMPFILE