@@ -436,23 +436,23 @@ Filters
436
436
437
437
- ``alias(description) ``: human-readable ``description `` of the rule
438
438
- ``cidr(ip/mask) ``: match on the client's `cidr <https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing >`_
439
- - ``filename(name) ``: match in the file ``name ``
440
- - ``filename_r(regexp) ``: the file name matching the ``regexp ``
441
- - ``function(name) ``: match on function ``name ``
442
- - ``function_r(regexp) ``: the function matching the ``regexp ``
443
- - ``hash(sha256) ``: match on the file's `sha256 <https://en.wikipedia.org/wiki/SHA-2 >`_ sum
444
- - ``line(line_number) ``: match on the file's line.
445
- - ``param(name) ``: match on the function's parameter ``name ``
439
+ - ``filename(name) ``: exact match on the file's ``name ``
440
+ - ``filename_r(regexp) ``: file name matching the ``regexp ``
441
+ - ``function(name) ``: exact match on function ``name ``
442
+ - ``function_r(regexp) ``: function name matching the ``regexp ``
443
+ - ``hash(sha256) ``: exact match on the file's `sha256 <https://en.wikipedia.org/wiki/SHA-2 >`_ sum
444
+ - ``line(line_number) ``: exact match on the file's line.
445
+ - ``param(name) ``: exact match on the function's parameter ``name ``
446
446
- ``param_r(regexp) ``: match on the function's parameter ``regexp ``
447
- - ``param_type(type) ``: match on the function's parameter ``type ``
448
- - ``pos(nth_argument) ``: match on the nth argument, starting from ``0 ``
449
- - ``ret(value) ``: match on the function's return ``value ``
447
+ - ``param_type(type) ``: exact match on the function's parameter ``type ``
448
+ - ``pos(nth_argument) ``: exact match on the nth argument, starting from ``0 ``
449
+ - ``ret(value) ``: exact match on the function's return ``value ``
450
450
- ``ret_r(regexp) ``: match with a ``regexp `` on the function's return
451
451
- ``ret_type(type_name) ``: match on the ``type_name `` of the function's return value
452
- - ``value(value) ``: match on a literal ``value ``
452
+ - ``value(value) ``: exact match on a literal ``value ``
453
453
- ``value_r(regexp) ``: match on a value matching the ``regexp ``
454
- - ``var(name) ``: match on a **local variable ** ``name ``
455
- - ``key(name) ``: match on the presence of ``name `` as a key in the hashtable
454
+ - ``var(name) ``: exact match on a **local variable ** ``name ``
455
+ - ``key(name) ``: exact match on the presence of ``name `` as a key in the hashtable
456
456
- ``key_r(regexp) ``: match with ``regexp `` on keys in the hashtable
457
457
458
458
The ``type `` must be one of the following values:
0 commit comments