Guide: Getting Started on RHEL, CentOS and rebuild Linux Distributions

Guides
, , , ,
21

Yes this is part of Proofpoint.

22

I have installed Suricata from OISF provided RPMs on CentOS 7. When services starts the following warnings occurs:

[/usr/lib/systemd/system/suricata.service:17] Unknown lvalue ‘MemoryDenyWriteExecute’ in section ‘Service’
[/usr/lib/systemd/system/suricata.service:18] Unknown lvalue ‘LockPersonality’ in section ‘Service’
[/usr/lib/systemd/system/suricata.service:19] Unknown lvalue ‘ProtectControlGroups’ in section ‘Service’
[/usr/lib/systemd/system/suricata.service:20] Unknown lvalue ‘ProtectKernelModules’ in section ‘Service’

In the suricata.service these four parameters are set to “true”. If the value “yes” is used the warnings don’t occur. Theoretically based on man systemd.unit the boolean arguments can be written in various formats (1, yes, true and on are equivalent). It looks like it is not. The suricata.service in CentOS/RHEL rpms can be corrected.

24

How can you create RPMs from the downloaded Suricata 6 files?

25

The files to build RPMs that the OISF provides for Suricata can be found here: GitHub - jasonish/suricata-rpms: Suricata RPMs for CentOS/RHEL and Fedora

I’ve just done some fixups and updated the README to help with doing your own local builds. For our official RPMs we use COPR, a build service provided by the Fedora project. The README has examples for building RPMs for CentOS 7 and AlmaLinux 8.