Task #7627
open
events/rules: prevent ruleset loading blocks from name fixes
Added by Juliana Fajardini Reichow 8 months ago.
Updated 18 days ago.
Description
#7361 had an unexpected effect of blocking the load of rule sets that used rules that previously would just silently fail if they used unknown events.
For dot releases, we want to avoid that. We also want to fix the rule set blocking outcome, for 7.
Related issues
1 (1 open — 0 closed)
- Related to Task #7626: tests: test rules shipped w/ Suricata for each release added
- Label Needs backport to 7.0 added
- Label deleted (
Needs backport to 7.0)
- Target version changed from 8.0.0-rc1 to 9.0.0-beta1
It's unclear if there is anything we want to change here. Invalid rules should be flagged, and we have strict mode to handle the subtleties.
Also available in: Atom
PDF