[PATCH] backup-exclude: Add suricata ruleset-sources to backup exclude file

[PATCH] backup-exclude: Add suricata ruleset-sources to backup exclude file

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1126 bytes --]

- This will ensure that an old version will no longer be restored back onto a users
   system.
- The suricata ruleset-sources file should also be shipped in the CU that this will be
   applied to make sure that all usders have the correct version installed, in case they
   have done a restore from an old backup after doing a fresh install.
- Tested on my vm testbed system and after making the change, the ruleset-sources file
   is no longer added to the backup set but also it is excluded from the restore if it
   is included in an old backup.

Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/backup/exclude | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/backup/exclude b/config/backup/exclude
index 0131a87fd..4dc1607a2 100644
--- a/config/backup/exclude
+++ b/config/backup/exclude
@@ -7,4 +7,5 @@ var/ipfire/ovpn/openssl/*
 var/ipfire/proxy/calamaris/bin/*
 var/ipfire/qos/bin/qos.pl
 var/ipfire/suricata/oinkmaster.conf
+var/ipfire/suricata/ruleset-sources
 var/ipfire/urlfilter/blacklists/*/*.db
-- 
2.47.1

Re: [PATCH] backup-exclude: Add suricata ruleset-sources to backup exclude file

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1313 bytes --]

Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org>

> On 13 Jan 2025, at 12:24, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
> 
> - This will ensure that an old version will no longer be restored back onto a users
>   system.
> - The suricata ruleset-sources file should also be shipped in the CU that this will be
>   applied to make sure that all usders have the correct version installed, in case they
>   have done a restore from an old backup after doing a fresh install.
> - Tested on my vm testbed system and after making the change, the ruleset-sources file
>   is no longer added to the backup set but also it is excluded from the restore if it
>   is included in an old backup.
> 
> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> config/backup/exclude | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/config/backup/exclude b/config/backup/exclude
> index 0131a87fd..4dc1607a2 100644
> --- a/config/backup/exclude
> +++ b/config/backup/exclude
> @@ -7,4 +7,5 @@ var/ipfire/ovpn/openssl/*
> var/ipfire/proxy/calamaris/bin/*
> var/ipfire/qos/bin/qos.pl
> var/ipfire/suricata/oinkmaster.conf
> +var/ipfire/suricata/ruleset-sources
> var/ipfire/urlfilter/blacklists/*/*.db
> -- 
> 2.47.1
>