From 10beae64bf0d8a381ae7b2aa2cb8a1b9463999da Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Tue, 15 Mar 2022 18:25:57 +0100 Subject: [PATCH] ids-functions.pl: Skip deleted.rules files These rulefiles are used by various providers as a kind of reference and to store rules which have been taken out for correctness, performance reasons or because of other reasons. Fixes #12794. Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer --- config/cfgroot/ids-functions.pl | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl index c4edd968d0..94dccc8ae3 100644 --- a/config/cfgroot/ids-functions.pl +++ b/config/cfgroot/ids-functions.pl @@ -547,6 +547,12 @@ sub extractruleset ($) { # Skip rule files which are not located in the rules directory or archive root. next unless(($packed_file =~ /^rules\//) || ($packed_file !~ /\//)); + # Skip deleted.rules. + # + # Mostly they have been taken out for correctness or performance reasons and therfore + # it is not a great idea to enable any of them. + next if($file =~ m/deleted.rules$/); + my $rulesfilename; # Splitt the filename into chunks. -- 2.39.2