On 12/7/2017 4:20 PM, John Hardin wrote:

I was more thinking about coverage for people who aren't using KAM.cf, but your comment about needing enough examples in the masscheck corpus to promote and score the rule is relevant - perhaps it is important enough to add as a base header rule, rather than through ruleqa sandboxes?

I'm guess I don't really know how.  What is your definition of a base header rule and what mechanism would you use to publish it as a base rule?  We effectively build rules as a measure to get an initial install but ruleqa driven sa-updates are our mechanism for publishing.

Regards,

KAM

Reply via email to