Actions
Bug #6149
closedexceptions: 'auto' policy not considered valid value in IDS mode
Affected Versions:
Effort:
Difficulty:
Label:
Description
When in IDS mode, Suricata issues a warning that 'auto' isn't a valid config option, and proceeds to setting
the master switch (and possibly other values, too) to `ignore` (see image attached).
Two fixes needed:
- 'auto' is valid, it just defaults to 'ignore' in IDS mode, so no warning should happen
- the "exception policy: exception policy" is confusing, reword the message
The function for parsing the master switch should probably be re-worked to avoid that last part.
Files
Actions