disable ICS based on variables

mmguero-dev · Dec 13, 2023 · b50b7dd · b50b7dd
1 parent ca41a4e
commit b50b7dd
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/shared/bin/suricata_config_populate.py b/shared/bin/suricata_config_populate.py
@@ -271,8 +271,8 @@ def __call__(self, repr, data):
         ),
         'dnp3': ProtocolConfig(
             [],
-            val2bool(DEFAULT_VARS['DNP3_ENABLED']),
-            val2bool(DEFAULT_VARS['DNP3_EVE_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['DNP3_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['DNP3_EVE_ENABLED']),
             True,
             DEFAULT_VARS['DNP3_PORTS'],
             None,
@@ -287,8 +287,8 @@ def __call__(self, repr, data):
         ),
         'enip': ProtocolConfig(
             [],
-            val2bool(DEFAULT_VARS['ENIP_ENABLED']),
-            val2bool(DEFAULT_VARS['ENIP_EVE_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['ENIP_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['ENIP_EVE_ENABLED']),
             False,
             DEFAULT_VARS['ENIP_PORTS'],
             DEFAULT_VARS['ENIP_PORTS'],
@@ -359,8 +359,8 @@ def __call__(self, repr, data):
         ),
         'modbus': ProtocolConfig(
             [],
-            val2bool(DEFAULT_VARS['MODBUS_ENABLED']),
-            val2bool(DEFAULT_VARS['MODBUS_EVE_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['MODBUS_ENABLED']),
+            (not val2bool(DEFAULT_VARS['DISABLE_ICS_ALL'])) and val2bool(DEFAULT_VARS['MODBUS_EVE_ENABLED']),
             False,
             DEFAULT_VARS['MODBUS_PORTS'],
             None,