mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
84a90873e9
SCConfYamlHandleInclude only accepted explicit filenames. The rule-files directive has supported shell-style glob expansion via glob(3) for years, and asymmetry with include has been blocking clean drop-in conf.d/ style configuration directories. Refactor SCConfYamlHandleInclude into a thin wrapper that resolves the path against conf_dirname and, if the input contains glob metacharacters (*, ?, [), expands it with glob(3) and includes each match in lexicographic order. A pattern that matches no files is logged as a warning and not treated as an error, so a drop-in directory can be empty without breaking startup. Literal paths skip glob() and call the existing per-file inclusion logic directly, preserving current behaviour. Glob expansion needs glob(3), which is not available everywhere. Windows builds have no glob.h, so an include pattern used to fall through and be opened as a literal filename, failing with a confusing errno. On such platforms the pattern is now logged as a warning and skipped instead. Literal includes are unaffected. The behaviour is verified by the config-includes-glob-order suricata-verify test, which checks that every file matching a pattern is loaded and that matches are included in deterministic lexicographic order. Document the new behaviour, including the platform limitation, in doc/userguide/configuration/includes.rst. Feature: #8427. |
2 months ago | |
|---|---|---|
| .. | ||
| suricata-yaml | 4 years ago | |
| dropping-privileges.rst | ||
| exception-policies.rst | 7 months ago | |
| global-thresholds.rst | 1 year ago | |
| includes.rst | 2 months ago | |
| index.rst | 3 years ago | |
| landlock.rst | 4 years ago | |
| multi-tenant.rst | 1 year ago | |
| snort-to-suricata.rst | 4 years ago | |
| suricata-yaml.rst | 4 months ago | |
| systemd-notify.rst | 3 years ago | |