Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add renamed rules and decoders to deprecated lists of update_ruleset #806

Closed
palaciosjeremias opened this issue Dec 2, 2020 · 1 comment · Fixed by #807
Closed

Add renamed rules and decoders to deprecated lists of update_ruleset #806

palaciosjeremias opened this issue Dec 2, 2020 · 1 comment · Fixed by #807
Assignees
@palaciosjeremias
Milestone
Sprint 121 - Core...

Comments

@palaciosjeremias
Copy link

palaciosjeremias commented Dec 2, 2020 •
edited

Description

As part of the epic #784, the word ossec should be replaced with wazuh in all the wazuh-ruleset repository. This leads to the renaming of some rules and decoders.
During exploratory testing #793 it was found that these rules and decoders were not deleted when update_ruleset script was executed.

update_ruleset has two lists for rules and decoders that are deprecated and must be deleted during an update of the ruleset.
0200-ossec_decoders.xml, 0015-ossec_rules.xml, 0016-wazuh_rules.xml must be added to these lists to guarantee the correct updates of the ruleset.
@palaciosjeremias palaciosjeremias self-assigned this Dec 2, 2020
@palaciosjeremias palaciosjeremias mentioned this issue Dec 2, 2020
Merged
1 task
@palaciosjeremias palaciosjeremias linked a pull request Dec 2, 2020 that will close this issue
Add renamed rules and decoders to deprecated lists of update_ruleset #807
Merged
1 task
@DProvinciani
Copy link
Contributor

Closing the issue as the pull #807 was merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@palaciosjeremias palaciosjeremias

Labels
None yet
Projects
None yet
Milestone
Sprint 121 - Core/Bugman
Development

Successfully merging a pull request may close this issue.

Add renamed rules and decoders to deprecated lists of update_ruleset wazuh/wazuh-ruleset
2 participants
@DProvinciani @palaciosjeremias