Actions
Bug #7418
closedrequires: rules with unmet requirements are still loaded
Affected Versions:
Effort:
Difficulty:
Label:
Description
By design, unknown expressions in the requires keyword are allowed for future compatibility, however their presence should mean that requirements are not met.
For example, if someone adds to a rule:
requires: foo bar;
The rule is parsed and will attempt to be loaded. However, we don't know anything about the requirement of "foo bar", so we should not load the rule and skip it.
Updated by Jason Ish 14 days ago
- Status changed from In Review to Resolved
PR https://github.com/OISF/suricata/pull/12177 merged.
Updated by Juliana Fajardini Reichow 5 days ago
- Subject changed from requires: treat unknown requirements as unmet requirements to requires: rules with unmet requirements are still loaded
- Status changed from Resolved to Closed
Actions