Support #3407
closedExclusion of source after removal from update.yaml
Description
How to reproduce:
Add
sources:
- A
- B
- C
Run suricata-update.
Edit update.yaml and remove "B". On next run, suricata-update will still fetch the removed (from update.yaml) source.
Expected behavior: suricata-update should consider entries that were removed from update.yaml as sources that should be removed/disabled.
Updated by Jason Ish almost 5 years ago
Can you run the 'list-enabled-sources' command? Maybe the same source was added/enabled with the add-source or enable-source command which does not store its configuration in update.yaml.
Updated by Tiago F. almost 5 years ago
Jason Ish wrote:
Can you run the 'list-enabled-sources' command? Maybe the same source was added/enabled with the add-source or enable-source command which does not store its configuration in update.yaml.
Hey Jason,
That was exactly it. I incorrectly assumed update.yaml was going to take precedence over everything, but like you mentioned, as soon as I listed the sources, I was given sources from both locations (update.yaml and suricata-update itself).
Thank you!
Updated by Shivani Bhardwaj almost 5 years ago
- Tracker changed from Bug to Support
- Status changed from New to Closed