From dbaa7e314e8c1a319d0917afe09a977ae4b127ec Mon Sep 17 00:00:00 2001
From: William Ballenthin <william.ballenthin@fireeye.com>
Date: Tue, 14 Jul 2020 14:43:23 -0600
Subject: [PATCH] main: doc about default rules

---
 capa/main.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/capa/main.py b/capa/main.py
index 7e52c1a1..29c630bd 100644
--- a/capa/main.py
+++ b/capa/main.py
@@ -493,6 +493,10 @@ def main(argv=None):
             logger.debug("default rule path (source method): %s", rules_path)
 
         if not os.path.exists(rules_path):
+            # when a users installs capa via pip,
+            # this pulls down just the source code - not the default rules.
+            # i'm not sure the default rules should even be written to the library directory,
+            # so in this case, we require the user to use -r to specify the rule directory.
             logger.error("default embedded rules not found! (maybe you installed capa as a library?)")
             logger.error("provide your own rule set via the `-r` option.")
             return -1