disable tests that can fail depending on CPU number

Bug: https://redmine.openinfosecfoundation.org/issues/7831
Last-Update: 2025-09-26

Some tests expect a minimum number of CPUs in the system and will
always fail when there are less. We disable these for now; upstream is
aware and will address this later.

Gbp-Pq: Name disable-cpu-dependent-tests.patch

[PATCH] ebpf: avoid to include if_tunnel.h

This is causing a dependency issue as file from another architecture
have to be installed.

Gbp-Pq: Name avoid-to-include-if_tunnel-h.patch

Add --with-ebpf-includes parameter

Last-Update: 2025-07-11
Bug: https://redmine.openinfosecfoundation.org/issues/3097

This patch fixes a FTBFS error on the i386 architecture by setting proper
include directories. The error is caused by improper directory names e.g.
'-I/usr/include/i386-linux-gnu' vs. '-I/usr/include/i686-linux-gnu/'.

Gbp-Pq: Name with-ebpf-includes.patch

do not clean vendor directory on distclean

Bug-Debian: https://bugs.debian.org/915154
Last-Update: 2025-07-11

dh_auto_clean calls make distclean, which in the case of Suricata also
removes the vendor directory. This breaks repeated builds.

Gbp-Pq: Name fix-repeated-builds.patch

Don't use __USE_GNU

Bug-Debian: https://bugs.debian.org/890432
Last-Update: 2025-07-11

__USE_GNU is a glibc-internal symbol.
AC_USE_SYSTEM_EXTENSIONS is the proper autoconf
way to enable extensions.

Gbp-Pq: Name no-use-gnu.patch

Fix a FTCBFS issue because of using AC_PATH_PROG

Bug-Debian: https://bugs.debian.org/895996
Last-Update: 2025-07-11

This patch fixes a FTCBFS issue caused by using AC_PATH_PROG to
discover the location of pkg-config, which fails to select the
correct version on cross-compilations. The corresponding lintian
warning 'autotools-pkg-config-macro-not-cross-compilation-safe'
suggests to use PKG_PROG_PKG_CONFIG and $PKG_CONFIG instead.

Gbp-Pq: Name cross.patch

Configure landlock LSM security sandbox, but disabled by default

Forwarded: not-needed
Last-Update: 2025-09-21

Gbp-Pq: Name configure-landlock.patch

Enable and configure Suricata unix command socket

Forwarded: not-needed
Last-Update: 2025-08-22

Gbp-Pq: Name enable-unix-command-socket.patch

suricata (1:8.0.6-1) unstable; urgency=medium

  * New upstream version 8.0.6
  * Add d/suricata.postrm to remove /var/log/suricata on purge.
Closes: #1140230
[dgit import unpatched suricata 1:8.0.6-1]

Import suricata_8.0.6.orig.tar.gz

[dgit import orig suricata_8.0.6.orig.tar.gz]

Import suricata_8.0.6-1.debian.tar.xz

[dgit import tarball suricata 1:8.0.6-1 suricata_8.0.6-1.debian.tar.xz]