For example: If you need to modify a part of a rule that contains a special character, such as a $ in variable names, the special character needs to be escaped in the search part of the modify string. These are the files that will need to be changed in order to customize nodes. Apply the firewall state to the node, or wait for the highstate to run for the changes to happen automatically. For more information, please see: # alert ip any any -> any any (msg:"GPL ATTACK_RESPONSE id check returned root"; content:"uid=0|28|root|29|"; classtype:bad-unknown; sid:2100498; rev:7; metadata:created_at 2010_09_23, updated_at 2010_09_23;), /opt/so/saltstack/local/pillar/minions/
security onion local rules