diff mbox series

ids-functions.pl: Do not longer extract all rulefiles in archive.

Message ID 20220313192725.3955-1-stefan.schantl@ipfire.org
State Accepted
Commit f349c960e46876253e4bc9ea9aaf0f7b72b99ef0
Headers
Series ids-functions.pl: Do not longer extract all rulefiles in archive. |

Commit Message

Stefan Schantl March 13, 2022, 7:27 p.m. UTC 
  Only extract rulefiles which are located in a rules directory and/or in the archive
root.

This prevents us from extracting experimental or binary rules etc. which
often are located in corresponding sub-directories.

Reference: #12794.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
 config/cfgroot/ids-functions.pl | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl
index 7223e6bea..2736363a5 100644
--- a/config/cfgroot/ids-functions.pl
+++ b/config/cfgroot/ids-functions.pl
@@ -533,6 +533,9 @@  sub extractruleset ($) {
 
 			# Handle rules files.
 			} elsif ($file =~ m/\.rules$/) {
+				# Skip rule files which are not located in the rules directory or archive root.
+				next unless(($packed_file =~ /^rules\//) || ($packed_file !~ /\//));
+
 				my $rulesfilename;
 
 				# Splitt the filename into chunks.