Yara index creation fails when local rule has syntax errors.

[ir0nf1re]

Hi,

It seems if you create a new Yara rule from scratch, and then restart pastehunter, you get the message below. If you remove the new Yara rule then the restart works.

Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Service hold-off time over, scheduling restart. Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Scheduled restart job, restart counter is at 5. Feb 22 13:05:19 vps639933 systemd[1]: Stopped PasteHunter. Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Start request repeated too quickly. Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Failed with result 'start-limit-hit'. Feb 22 13:05:19 vps639933 systemd[1]: Failed to start PasteHunter.

[ir0nf1re]

It may be related to this error message: Unable to Create Yara index: YaraRules/recon.yar(24): syntax error, unexpected end of file, expecting

[kevthehermit]

That looks like the issue is with the syntax in your local rule file. I will add some more handling around yara rules to validate each rule before including so it doesnt take the whole stack down.