On Mon, 27 Apr 2009, Justin Mason wrote:
On Mon, Apr 27, 2009 at 17:38, John Hardin <jhar...@impsec.org> wrote:
But this is only part of the problem. How difficult is it for third parties
to submit rules for review and inclusion in the base ruleset without
necessarily joining the dev group? Is posting the proposed rule to bugzilla
sufficient?
getting the rule into the "rulesrc" area is all that's needed. it
gets auto-promoted based on linting ok, getting good performance etc....
it's a hell of a lot easier to use SVN these days though. Would it
really be impossible to do it that way? that's as simple as
svn up
edit rulesrc/sandbox/jm/20_whatever.cf
svn commit rulesrc/sandbox/jm/20_whatever.cf
and wait ;)
That's cool too. I was just wondering how much manual review
newly-submitted rules would/should be subject to.
Does "good performance" mean it has to meet a minimal hit rate? Are there
other metrics?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
It is not the business of government to make men virtuous or
religious, or to preserve the fool from the consequences of his own
folly. -- Henry George
-----------------------------------------------------------------------
96 days since Obama's inauguration and still no unicorn!
