Package: suricata
Version: 1:5.0.2-3
Severity: normal
Tags: patch

As part of the migration away from /var/run/ to /run/,
systemd produces log events containing the following. 

"/lib/systemd/system/suricata.service:10: PIDFile= references a path below 
legacy directory /var/run/, updating /var/run/suricata.pid → /run/suricata.pid; 
please update the unit file accordingly."

Attached is a patch for /lib/systemd/system/suricata.service that moves the
PIDFile from /var/run/suricata.pid to /run/suricata.pid

This implements the recommendation from the logs and will silence
those notices from being produced in the system logs.

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-4-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages suricata depends on:
ii  dpkg                     1.19.7
ii  init-system-helpers      1.57
ii  libbpf0                  5.4.19-1
ii  libc6                    2.30-2
ii  libcap-ng0               0.7.9-2.1+b1
ii  libevent-2.1-7           2.1.11-stable-1
ii  libevent-pthreads-2.1-7  2.1.11-stable-1
ii  libgcc-s1                10-20200312-2
ii  libhiredis0.14           0.14.0-6
ii  libhtp2                  1:0.5.32-1
ii  libhyperscan5            5.2.1-1
ii  libjansson4              2.12-1
ii  libluajit-5.1-2          2.1.0~beta3+dfsg-5.1
ii  liblz4-1                 1.9.2-2
ii  libmagic1                1:5.38-4
ii  libmaxminddb0            1.3.2-1
ii  libnet1                  1.1.6+dfsg-3.1
ii  libnetfilter-log1        1.0.1-1.1+b1
ii  libnetfilter-queue1      1.0.3-1
ii  libnfnetlink0            1.0.1-3+b1
ii  libnspr4                 2:4.25-1
ii  libnss3                  2:3.49.1-1
ii  libpcap0.8               1.9.1-2
ii  libpcre3                 2:8.39-12+b1
ii  libprelude28             5.1.1-4+b1
ii  libyaml-0-2              0.2.2-1
ii  lsb-base                 11.1.0
ii  python3                  3.7.5-3
ii  python3-simplejson       3.16.0-2+b1
ii  zlib1g                   1:1.2.11.dfsg-2

Versions of packages suricata recommends:
pn  snort-rules-default  <none>
ii  suricata-update      1.1.1-1

Versions of packages suricata suggests:
pn  libtcmalloc-minimal4  <none>

-- no debconf information
--- suricata.service.old        2020-03-21 15:36:25.309491850 +0000
+++ suricata.service.new        2020-03-21 15:38:20.299404438 +0000
@@ -8,8 +8,8 @@
 [Service]
 Type=forking
 #Environment=LD_PRELOAD=/usr/lib/libtcmalloc_minimal.so.4
-PIDFile=/var/run/suricata.pid
-ExecStart=/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml 
--pidfile /var/run/suricata.pid
+PIDFile=/run/suricata.pid
+ExecStart=/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml 
--pidfile /run/suricata.pid
 ExecReload=/usr/bin/suricatasc -c reload-rules ; /bin/kill -HUP $MAINPID
 ExecStop=/usr/bin/suricatasc -c shutdown
 Restart=on-failure

Reply via email to