Actions
Bug #7886
openfirewall: --firewall-rules-exclusive loads generic td rules as well
Affected Versions:
Effort:
Difficulty:
Label:
Needs Suricata-Verify test
Description
when it should only load the firewall rules.
Actions
Added by Shivani Bhardwaj 2 months ago. Updated 7 days ago.
Description
when it should only load the firewall rules.
Is the only problem the fact that we can use -S ?
see
if (!sig_file_exclusive && de_ctx->firewall_rule_file_exclusive) {
Think this is simple enough to tackle for the upcoming release. Self assigned
Philippe Antoine wrote in #note-4:
Is the only problem the fact that we can use
-S?see
[...]
No idea. I spent some time trying to understand what I meant here but either I tested it wrong or it happened in a special combination of config and cmdline options. But, for now, I'm unable to reproduce this and what I've written here seems impossible by looking at the code.
Should have done a better job at ticket description.