allow for mmap-locked to be configured

salt/suricata/defaults.yaml

@@ -30,6 +30,7 @@ suricata:
       cluster-type: cluster_flow
       defrag: "yes"
       use-mmap: "yes"
+      mmap-locked: "yes"
       threads: 1
       tpacket-v3: "yes"
       ring-size: 5000

salt/suricata/map.jinja

@@ -34,6 +34,7 @@
   cluster-type: {{ SURICATAMERGED.config['af-packet']['cluster-type'] }}
   defrag: "{{ SURICATAMERGED.config['af-packet'].defrag }}"
   use-mmap: "{{ SURICATAMERGED.config['af-packet']['use-mmap'] }}"
+  mmap-locked: {{ SURICATAMERGED.config['af-packet']['mmap-locked'] }}
   threads: {{ SURICATAMERGED.config['af-packet'].threads }}
   tpacket-v3: "{{ SURICATAMERGED.config['af-packet']['tpacket-v3'] }}"
   ring-size: {{ SURICATAMERGED.config['af-packet']['ring-size'] }}

salt/suricata/soc_suricata.yaml

@@ -83,6 +83,11 @@ suricata:
       use-mmap:
         advanced: True
         readonly: True
+      mmap-locked:
+        description: Prevent swapping by locking the memory map.
+        advanced: True
+        regex: ^(yes|no)$
+        helpLink: suricata.html
       threads:
         description: The amount of worker threads.
         helpLink: suricata.html