CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Only stop SOC if is_manager or is_import

Browse Source
This commit is contained in:
Jason Ertel
2020-12-31 15:09:22 -05:00
committed by William Wernert
parent 7dcd934269
commit 1cc8a78aa5
8 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
setup/automation/aws_forwardnode_defaults → setup/automation/distributed_forwardnode_ami
View File

0
setup/automation/aws_manager_defaults → setup/automation/distributed_manager_ami
View File

0
setup/automation/aws_searchnode_defaults → setup/automation/distributed_searchnode_ami
View File

0
setup/automation/aws_eval_defaults → setup/automation/eval_ami
View File

0
setup/automation/pm_eval_defaults → setup/automation/eval_iso
View File

0
setup/automation/aws_standalone_defaults → setup/automation/standalone_ami
View File

0
setup/automation/pm_standalone_defaults → setup/automation/standalone_iso
View File

5
setup/so-setup
View File

@@ -843,8 +843,11 @@ else
[ -n "$TESTING" ] && logCmd so-test
export percentage=95 # set to last percentage used in previous subshell
so-soc-stop # Stop SOC so it doesn't accept external requests prior to the reboot
if [[ -n $ALLOW_ROLE && -n $ALLOW_CIDR ]]; then
if [[ $is_manager || $is_import ]]; then
set_progress_str 96 "Stopping SOC prior to adjusting firewall rules"
so-soc-stop # Stop SOC so it doesn't accept external requests prior to the reboot
fi
set_progress_str 97 "Running so-allow -${ALLOW_ROLE} for ${ALLOW_CIDR}"
IP=$ALLOW_CIDR so-allow -$ALLOW_ROLE >> $setup_log 2>&1
fi