Actions
Documentation #8018
opendatasets: a rule using "load" can use an absolute or relative filename
Affected Versions:
Effort:
Difficulty:
Label:
Description
Ticket #6118 addressed the issue of relative and absolute filenames for save and state with respect to datasets, however the comments in suricata.yaml suggest that they are applied to load as well. While the documentation covers this, https://docs.suricata.io/en/latest/rules/datasets.html#file-locations, it should also be reflected in suricata.yaml.
rules:
# Set to true to allow absolute filenames and filenames that use
# ".." components to reference parent directories in rules that specify
# their filenames.
#allow-absolute-filenames: false
Actions