config

#!/bin/sh -e

. /usr/share/debconf/confmodule
test $DEBIAN_SCRIPT_DEBUG && set -v -x

if [ -r /etc/snort/snort.debian.conf ] ; then
    . /etc/snort/snort.debian.conf
    # Set the variables in debconf using the configuration values 
    # (if defined)
    [ ! -z "$DEBIAN_SNORT_STARTUP" ] && { db_set snort-mysql/startup "$DEBIAN_SNORT_STARTUP"; db_fset snort-mysql/startup seen true ; }
    [ ! -z "$DEBIAN_SNORT_HOME_NET" ] && { db_set snort-mysql/address_range "$DEBIAN_SNORT_HOME_NET"; db_fset snort-mysql/address_range seen true ; }
    if [ ! -z "$DEBIAN_SNORT_OPTIONS" ] ; then
        # Remove the -p option wich is added in postinst due to the 'DISABLE_PROMISCUOUS' debconf option
        DEBIAN_SNORT_OPTIONS=`echo "$DEBIAN_SNORT_OPTIONS" | sed -e 's/ -p$//'`
        db_get snort/reverse_order
        if [ "x$RET" = "xyes" ]; then
        # Remove the -o option which was introduced by Debconf
        # (snort/reverse_order) in versions previous to 2.8.5.2-2
            DEBIAN_SNORT_OPTIONS=`echo "$DEBIAN_SNORT_OPTIONS" | sed -e 's/ -o$//'`
        fi

        db_set snort-mysql/options "$DEBIAN_SNORT_OPTIONS" 
        db_fset snort-mysql/options seen true 
    fi
    [ ! -z "$DEBIAN_SNORT_INTERFACE" ] && { db_set snort-mysql/interface "$DEBIAN_SNORT_INTERFACE"; db_fset snort-mysql/interface seen true ; }
    [ ! -z "$DEBIAN_SNORT_SEND_STATS" ] && { db_set snort-mysql/send_stats "$DEBIAN_SNORT_SEND_STATS"; db_fset snort-mysql/send_stats seen true ; }
    [ ! -z "$DEBIAN_SNORT_STATS_RCPT" ] && { db_set snort-mysql/stats_rcpt "$DEBIAN_SNORT_STATS_RCPT" ; db_fset snort-mysql/stats_rcpt  seen true ; }
    [ ! -z "$DEBIAN_SNORT_STATS_THRESHOLD" ] && { db_set snort-mysql/stats_treshold "$DEBIAN_SNORT_STATS_THRESHOLD"; db_fset snort-mysql/stats_treshold seen true ; }
fi


INTERFACES=""

check_interfaces() {
# Check the interface status, abort with error if a configured one is not
# available
      [ -z "$INTERFACES" ] && return 0
      ints=`echo $INTERFACES | sed -e  's/,/ /g'`
      for iface in $ints; do
              if ! LC_ALL=C ifconfig "$iface" 2>/dev/null | grep -w UP >/dev/null; then
                      return 1
             fi
      done
      return 0
}


db_input low snort-mysql/startup || true
db_go

# /etc/ppp/ip-up.d/snort-mysql is called with interface and IP number
db_get snort-mysql/startup
if [ "x$RET" = "xdialup" ]; then
  db_set snort-mysql/interface ""
  db_set snort-mysql/address_range ""
  db_set snort-mysql/disable_promiscuous true
else
  db_beginblock
  # Interface default in case the configuration file does not exist
  if [ -z "$DEBIAN_SNORT_INTERFACE" ] ; then
        INTERFACES=eth0
  else
        INTERFACES="$DEBIAN_SNORT_INTERFACE"
  fi

  # Ask for a valid set of interfaces
  ok=''
  count=0
  while [ ! "$ok" ] && [ "$count" -lt 2 ]; do
  # Depending on whether the default interface is up or down we set the
  # question priority
        priority='medium'
        if ! check_interfaces
        then
            priority='high'
            db_fset snort-mysql/interface seen false
        fi
        set +e
        db_input $priority snort-mysql/interface
        if [ $? -eq 30 ]; then
        # User is not being shown the question, break out
             break
        fi
        set -e
        db_go || true
   # Check the interfaces
        db_get snort-mysql/interface
        INTERFACES=$RET
        if ! check_interfaces ; then
          db_fset snort-mysql/invalid_interface seen false
          db_input critical snort-mysql/invalid_interface
        else
          ok='yes'
        fi
        # Increment the count, we only go through this two times
        count=$(($count+1))
  done

  db_input high snort-mysql/address_range || true
  db_input low snort-mysql/disable_promiscuous || true
  db_endblock
  db_go
fi

db_beginblock
db_input low snort-mysql/options || true
db_endblock
db_go

db_beginblock
db_input low snort-mysql/send_stats || true
db_go

db_get snort-mysql/send_stats
if [ "x$RET" = "true" ]; then
# TODO: This values should not be empty (even
# if we default to 'root' and '1' in the scripts)
# so the config script should check wether the 
# values here are legitimate.
	db_beginblock
	db_input medium snort-mysql/stats_rcpt || true
	db_input low snort-mysql/stats_treshold || true
	db_endblock
	db_go
fi

# TODO: Database configuration should ensure that only 
# valid characters are included here. Since the information
# is written into a configuration file at least hashes should be prevented.
# See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567495

db_input high snort-mysql/configure_db || true
db_go
db_get snort-mysql/configure_db
if  [ "x$RET" = "xtrue" ]; then
	db_beginblock
	db_input medium snort-mysql/db_host || true
	db_input medium snort-mysql/db_database || true
	db_input medium snort-mysql/db_user || true
	db_input medium snort-mysql/db_pass || true
        # Use the old name for the Debconf value if it exists
	db_get snort-pgsql/wait_for_db_config || true
	if  [ "x$RET" = "xtrue" ]; then
		db_set snort-mysql/needs_db_config "true" || true
	else
		db_input high snort-mysql/needs_db_config || true
	fi
	db_endblock
	db_go
fi

DEFAULT=/etc/default/snort
PARAMETERS=/etc/snort/snort.common.parameters
if [ -e "$DEFAULT" ] && [ -e "$PARAMETERS" ] ; then
        db_beginblock
        db_input high snort-mysql/config_parameters || true
        db_endblock
        db_go
fi

db_get snort-mysql/startup
if [ "x$RET" = "xmanual" ]; then
	db_beginblock
	db_input medium snort-mysql/please_restart_manually || true
	db_endblock
	db_go
fi

db_stop
snort-mysql 2.9.2-3ubuntu1 / config
