From: Russ Combs (rucombs) <rucombs@cisco.com>
Date: Wed, 24 Jun 2020 19:01:30 +0000 (+0000)
Subject: Merge pull request #2285 in SNORT/snort3 from ~RUCOMBS/snort3:file_sigz to master
X-Git-Tag: 3.0.2-1~18
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0f3aa0a98bf59ca52cb47367640ab1004aaa5802;p=thirdparty%2Fsnort3.git

Merge pull request #2285 in SNORT/snort3 from ~RUCOMBS/snort3:file_sigz to master

Squashed commit of the following:

commit 781017247a58252a56bb4a89846fa996d1448f50
Author: russ <rucombs@cisco.com>
Date:   Wed Jun 24 08:15:17 2020 -0400

    tweaks: enable file signature for sec and max until depth issue resolved
---

diff --git a/lua/max_detect.lua b/lua/max_detect.lua
index 2510f6910..29ec2ea5a 100644
--- a/lua/max_detect.lua
+++ b/lua/max_detect.lua
@@ -6,6 +6,9 @@
 
 arp_spoof = nil
 
+-- bug: false will limit http file_data
+file_id.enable_signature = true
+
 ftp_server.check_encrypted = true
 
 detection =
diff --git a/lua/security.lua b/lua/security.lua
index c2613d94f..3a046c44a 100644
--- a/lua/security.lua
+++ b/lua/security.lua
@@ -5,6 +5,9 @@
 
 arp_spoof = nil
 
+-- bug: false will limit http file_data
+file_id.enable_signature = true
+
 ftp_server.check_encrypted = true
 
 detection =