NSM: check for FORCE_YES

[dougburks]

https://groups.google.com/d/topic/security-onion/kHxC7QQ5Qv0/discussion

In regard to /usr/sbin/nsm_sensor_clear, it does look like this:

# prompt to clear the sensor
prompt_user_yesno "Clear Sensor" "All collected data for sensor \"${SENSOR_NAME}\" will be cleared.\n\nDo you want to continue?" "N"
    [ "$?" -ne 0 ] && exit 1
    if [ "$PROMPT_RET" != "Y" -a "$PROMPT_RET" != "y" ]
    then
        exit 1
    fi

should be changed to:

if [ "$FORCE_YES" != "yes" ]; then
        # prompt to clear the sensor
        prompt_user_yesno "Clear Sensor" "All collected data for sensor \"${SENSOR_NAME}\" will be cleared.\n\nDo you want to continue?" "N"
        [ "$?" -ne 0 ] && exit 1
        if [ "$PROMPT_RET" != "Y" -a "$PROMPT_RET" != "y" ]
        then
                exit 1
        fi
fi

It doesn't appear to be checking if FORCE_YES is set.

[hudsonmanieri]

I had a problem with it and just found this answer now! Thanks!

By the way, I did it right after my post to security-onion group:

# prompt to clear the sensor
if [ -z $FORCE_YES ]
then
        prompt_user_yesno "Clear Sensor" "All collected data for sensor \"${SENSOR_NAME}\" will be cleared.\n\nDo you want to continue?" "N"
        ["$?" -ne 0 ] && exit 1
        if [ "$PROMPT_RET" != "Y" -a "$PROMPT_RET" != "y" ]
        then
                exit 1
        fi
fi

[dougburks]

commit:
Security-Onion-Solutions/securityonion-nsmnow-admin-scripts@ac6257e

[dougburks]

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/M9GzupEMS9E/discussion

[dougburks]

Published:
https://blog.securityonion.net/2018/11/securityonion-nsmnow-admin-scripts.html