backup-exclude: Add suricata ruleset-sources to backup exclude file

Message ID 20250113122442.55641-1-adolf.belka@ipfire.org
State New
Headers
Series backup-exclude: Add suricata ruleset-sources to backup exclude file |

Commit Message

Adolf Belka Jan. 13, 2025, 12:24 p.m. UTC
  - This will ensure that an old version will no longer be restored back onto a users
   system.
- The suricata ruleset-sources file should also be shipped in the CU that this will be
   applied to make sure that all usders have the correct version installed, in case they
   have done a restore from an old backup after doing a fresh install.
- Tested on my vm testbed system and after making the change, the ruleset-sources file
   is no longer added to the backup set but also it is excluded from the restore if it
   is included in an old backup.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/backup/exclude | 1 +
 1 file changed, 1 insertion(+)
  

Comments

Michael Tremer Jan. 15, 2025, 11:42 a.m. UTC | #1
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

> On 13 Jan 2025, at 12:24, Adolf Belka <adolf.belka@ipfire.org> wrote:
> 
> - This will ensure that an old version will no longer be restored back onto a users
>   system.
> - The suricata ruleset-sources file should also be shipped in the CU that this will be
>   applied to make sure that all usders have the correct version installed, in case they
>   have done a restore from an old backup after doing a fresh install.
> - Tested on my vm testbed system and after making the change, the ruleset-sources file
>   is no longer added to the backup set but also it is excluded from the restore if it
>   is included in an old backup.
> 
> Tested-by: Adolf Belka <adolf.belka@ipfire.org>
> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
> ---
> config/backup/exclude | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/config/backup/exclude b/config/backup/exclude
> index 0131a87fd..4dc1607a2 100644
> --- a/config/backup/exclude
> +++ b/config/backup/exclude
> @@ -7,4 +7,5 @@ var/ipfire/ovpn/openssl/*
> var/ipfire/proxy/calamaris/bin/*
> var/ipfire/qos/bin/qos.pl
> var/ipfire/suricata/oinkmaster.conf
> +var/ipfire/suricata/ruleset-sources
> var/ipfire/urlfilter/blacklists/*/*.db
> -- 
> 2.47.1
>
  

Patch

diff --git a/config/backup/exclude b/config/backup/exclude
index 0131a87fd..4dc1607a2 100644
--- a/config/backup/exclude
+++ b/config/backup/exclude
@@ -7,4 +7,5 @@  var/ipfire/ovpn/openssl/*
 var/ipfire/proxy/calamaris/bin/*
 var/ipfire/qos/bin/qos.pl
 var/ipfire/suricata/oinkmaster.conf
+var/ipfire/suricata/ruleset-sources
 var/ipfire/urlfilter/blacklists/*/*.db