Optimization #2843: suricatact/filestore/prune: check that directory is a filestore directory before removing files - Suricata - Open Information Security Foundation

Actions

Copy link

Optimization #2843

closed

suricatact/filestore/prune: check that directory is a filestore directory before removing files

Added by Jason Ish over 5 years ago. Updated about 5 years ago.

Status:

Closed

Priority:

High

Assignee:

Shivani Bhardwaj

Target version:

5.0rc1

Effort:

Difficulty:

Label:

Description

Currently the filestore prune command will attempt to prune whatever directory it is given. I think some simple validation should be done. This could be as simple as looking for the directories "00", "ff" and "tmp" as these are all expected to exist in a filestore directory created by suricata.