Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional falco rules files should be able to override any macro/list/rule #176

Closed
mstemm opened this issue Dec 28, 2016 · 0 comments · Fixed by #177
Closed

Additional falco rules files should be able to override any macro/list/rule #176

mstemm opened this issue Dec 28, 2016 · 0 comments · Fixed by #177
Assignees

Comments

@mstemm
Copy link
Contributor

mstemm commented Dec 28, 2016

Currently, falco can read multiple rules files and load them all into its running instance. However, the rules are always appended the current ruleset. This makes it impossible for example to have a second "overrides" rules file that changes the behavior of rules in the first file.

Also, you can not change a macro or list in a second rules file and have it change the behavior of an already loaded rule that referred to that macro/list. The best fix for this might be to implement #146.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant