From 2184c6d59fb92ccebed3f072a0c78a13efa85eba Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Fri, 19 Feb 2021 09:31:22 -0500
Subject: [PATCH] [fix] Create dict value if it doesn't exist

---
 salt/common/tools/sbin/so-rules | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/salt/common/tools/sbin/so-rules b/salt/common/tools/sbin/so-rules
index 6db261bda..0406eb67a 100644
--- a/salt/common/tools/sbin/so-rules
+++ b/salt/common/tools/sbin/so-rules
@@ -174,6 +174,9 @@ def add_rem_disabled(args: dict):
     return 2
 
   pillar_dict = read_pillar(args.pillar)
+
+  if not sids_key_exists(pillar_dict, 'disabled'):
+    pillar_dict['idstools']['sids']['disabled'] = None
   
   if args.remove:
     temp_pillar_dict = rem_from_sids(pillar_dict, 'disabled', args.sid_pattern)
@@ -237,6 +240,9 @@ def add_rem_enabled(args: dict):
 
   pillar_dict = read_pillar(args.pillar)
 
+  if not sids_key_exists(pillar_dict, 'enabled'):
+    pillar_dict['idstools']['sids']['enabled'] = None
+
   if args.remove:
     temp_pillar_dict = rem_from_sids(pillar_dict, 'enabled', args.sid_pattern)
   else:
@@ -285,6 +291,9 @@ def add_rem_modify(args: dict):
 
   pillar_dict = read_pillar(args.pillar)
 
+  if not sids_key_exists(pillar_dict, 'modify'):
+    pillar_dict['idstools']['sids']['modify'] = None
+
   if args.remove:
     temp_pillar_dict = rem_from_sids(pillar_dict, 'modify', string_val)
   else: