Bug #3209: Copy engine provided classification.config to $datadir/suricata. - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #3209

closed

Copy engine provided classification.config to $datadir/suricata.

Added by Jason Ish about 5 years ago. Updated about 5 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Jason Ish

Target version:

5.0.0

Affected Versions:

5.0rc1

Effort:

Difficulty:

Label:

Description

We currently copy classification.config to /etc/suricata and do not updated on upgrades which can lead to it become old requiring user-intervention to fix. Instead we should copy it to $datadir/suricata (ie: /usr/share/suricata/classification.config) where it can be updated on every upgrade, and also be pulled in by a future version of suricata-update for merging with other classification.config files found in rulesets.

We should likely do the same for the default reference.config.