Bug #6833: datasets: a dataset from one source can overwrite the dataset of another - Suricata-Update - Open Information Security Foundation

Actions

Copy link

Bug #6833

closed

datasets: a dataset from one source can overwrite the dataset of another

Added by Jason Ish about 1 year ago. Updated about 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Jason Ish

Target version:

1.3.1

Affected Versions:

1.3.0

Effort:

Difficulty:

Label:

Description

Even though an attempt was made to allow dataset files with duplicate filenames to not clobber each other, it was flawed and instead they do clobber each other. In practice we don't see this yet, and we've been recommending that users of dataset namespace their dataset under a directory corresponding to their vendor name, however we should still cover this case.