NSM: create /usr/sbin/broctl

[dougburks]

/usr/sbin/broctl will be a wrapper to run /opt/bro/bin/broctl as a limited user:

#!/bin/bash

SO_CONF="/etc/nsm/securityonion.conf"

# Add new Bro entries to SO_CONF if necessary
if ! grep BRO_USER $SO_CONF >/dev/null; then
        echo >> $SO_CONF
        echo "# BRO_USER specifies the user account used to start Bro." >> $SO_CONF
        echo "BRO_USER=sguil"   >> $SO_CONF
        echo "BRO_GROUP=sguil"  >> $SO_CONF
fi

# load in user config
. $SO_CONF

su $BRO_USER -c "/opt/bro/bin/broctl $@"

[dougburks]

commits:

Security-Onion-Solutions/securityonion-nsmnow-admin-scripts@ceca915

Security-Onion-Solutions/securityonion-nsmnow-admin-scripts@10dd8a3

[dougburks]

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/4E5fP25nbm0/discussion

[dougburks]

published:
http://blog.securityonion.net/2017/01/pulledpork-rule-update-and-several.html