suricata: T6624: Make it possible for suricata address groups to reference each other

[natali-rs1985]

Change Summary

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe):

Related Task(s)

• https://vyos.dev/T6624

Related PR(s)

Component(s) name

service suricata

Proposed changes

How to test

set service suricata interface 'eth1'
set service suricata port-group port-group port '5080'
set service suricata address-group home-net address '19.168.1.0/24'
set service suricata address-group home-net address '2001:8e0:3a60:b2c1::/64'
set service suricata address-group home-net address 'fd1a:dcb9:501c:1201::/64'
set service suricata address-group external-net group '!home-net'
commit

before the fix there was an error

vyos@vyos# commit

Invalid address-group: Undefined referenced group "home-net"

[[service suricata]] failed
Commit failed
[edit]

now it's working

vyos@vyos# commit
[ service suricata ]

WARNING: To fetch the latest rules, use "update suricata"; To
periodically fetch the latest rules, use the task scheduler!


[edit]

Smoketest result

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• I have run the components SMOKETESTS if applicable
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[github-actions]

👍
No issues in PR Title / Commit Title

[github-actions]

✅ No issues found in unused-imports check.. Please refer the workflow run