Merge pull request #2285 in SNORT/snort3 from ~RUCOMBS/snort3:file_sigz to master

Squashed commit of the following:

commit 781017247a58252a56bb4a89846fa996d1448f50
Author: russ <rucombs@cisco.com>
Date:   Wed Jun 24 08:15:17 2020 -0400

    tweaks: enable file signature for sec and max until depth issue resolved

diff --git a/lua/max_detect.lua b/lua/max_detect.lua
index 2510f6910fbc6094fec51b935560874b1cb1add7..29ec2ea5a8602d792f86f97144e690064f607a12 100644 (file)
--- a/lua/max_detect.lua
+++ b/lua/max_detect.lua
@@ -6,6 +6,9 @@
 
 arp_spoof = nil
 
+-- bug: false will limit http file_data
+file_id.enable_signature = true
+
 ftp_server.check_encrypted = true
 
 detection =

diff --git a/lua/security.lua b/lua/security.lua
index c2613d94f7947bc537626634a2ab9e630b9a84d9..3a046c44acd3bab40c7dc920d91d7cddf0b46ecd 100644 (file)
--- a/lua/security.lua
+++ b/lua/security.lua
@@ -5,6 +5,9 @@
 
 arp_spoof = nil
 
+-- bug: false will limit http file_data
+file_id.enable_signature = true
+
 ftp_server.check_encrypted = true
 
 detection =