Project

General

Profile

Actions

Task #4480

closed

Packaging/RPM: Remove engine provided rules from /etc/suricata/rules

Added by Jason Ish over 3 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Suricata has been installing engine provided rules into /usr/share/suricata/rules since 5.0 instead of /etc/suricata/rules (respective of --prefix). For compatibility reasons the RPM has also been making a copy of these files in /etc/suricata/rules.

For 7.0 the RPM package should only create the /etc/suricata/rules directory but otherwise leave it empty.

Actions

Also available in: Atom PDF