Skip to content

Commit

Permalink
rules: use primary default-rule-path if set on command line
Browse files Browse the repository at this point in the history
When reloading rules, respect `--set default-rule-path=...` from the
command line if set.

Previously the rule reload would always take the default-rule-path from
the configuration file, even if overrided on the command line.

Issue: OISF#1911
  • Loading branch information
jasonish authored and victorjulien committed May 21, 2022
1 parent 28ac75b commit 3ea6572
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions src/detect-engine-loader.c
Original file line number Diff line number Diff line change
Expand Up @@ -68,16 +68,22 @@ char *DetectLoadCompleteSigPath(const DetectEngineCtx *de_ctx, const char *sig_f
return NULL;
}

if (strlen(de_ctx->config_prefix) > 0) {
/* If we have a configuration prefix, only use it if the primary configuration node
* is not marked as final, as that means it was provided on the command line with
* a --set. */
ConfNode *default_rule_path = ConfGetNode("default-rule-path");
if ((!default_rule_path || !default_rule_path->final) && strlen(de_ctx->config_prefix) > 0) {
snprintf(varname, sizeof(varname), "%s.default-rule-path",
de_ctx->config_prefix);
} else {
snprintf(varname, sizeof(varname), "default-rule-path");
default_rule_path = ConfGetNode(varname);
}
if (default_rule_path) {
defaultpath = default_rule_path->val;
}

/* Path not specified */
if (PathIsRelative(sig_file)) {
if (ConfGet(varname, &defaultpath) == 1) {
if (defaultpath) {
SCLogDebug("Default path: %s", defaultpath);
size_t path_len = sizeof(char) * (strlen(defaultpath) +
strlen(sig_file) + 2);
Expand All @@ -93,7 +99,7 @@ char *DetectLoadCompleteSigPath(const DetectEngineCtx *de_ctx, const char *sig_f
strlcat(path, "/", path_len);
#endif
strlcat(path, sig_file, path_len);
} else {
} else {
path = SCStrdup(sig_file);
if (unlikely(path == NULL))
return NULL;
Expand Down

0 comments on commit 3ea6572

Please sign in to comment.