From 62b3a7c5e9ea60844802c8f1fd6bcd6e4f5ea81a Mon Sep 17 00:00:00 2001
From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Tue, 9 Oct 2018 12:37:30 +0100
Subject: [Conf] Add composite to negate policies when fuzzy/bayes found

---
 conf/composites.conf | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'conf')

diff --git a/conf/composites.conf b/conf/composites.conf
index 0de2ee2a0..6536aa42b 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -117,6 +117,12 @@ composites {
         description = "Contains one or more domains trying to disguise owner/destination";
         score = 0.5;
     }
+    BAD_REP_POLICIES {
+      description = "Contains valid policies but are also marked by fuzzy/bayes";
+      expression = "(g-:policies) & (g+:fuzzy | g+:bayes)";
+      score = 0.1;
+      policy = "remove_weight";
+    }
 
     .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf"
     .include(try=true; priority=10) "$LOCAL_CONFDIR/override.d/composites.conf"
-- 
cgit v1.2.3