Project

General

Profile

Actions

Optimization #2843

closed

suricatact/filestore/prune: check that directory is a filestore directory before removing files

Added by Jason Ish almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
High
Target version:
Effort:
Difficulty:
Label:

Description

Currently the filestore prune command will attempt to prune whatever directory it is given. I think some simple validation should be done. This could be as simple as looking for the directories "00", "ff" and "tmp" as these are all expected to exist in a filestore directory created by suricata.

Actions

Also available in: Atom PDF