From 21c80e4953a4de0b0cfa58464808fc44e8665704 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 8 Aug 2023 15:27:23 -0400
Subject: [PATCH] run so-rule-update after idstools container restart

---
 salt/idstools/enabled.sls    | 8 ++++++++
 salt/idstools/sync_files.sls | 6 ------
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/salt/idstools/enabled.sls b/salt/idstools/enabled.sls
index bf5650773..966cb6786 100644
--- a/salt/idstools/enabled.sls
+++ b/salt/idstools/enabled.sls
@@ -69,6 +69,14 @@ so-rule-update:
     - minute: '1'
     - hour: '7'
 
+run_so-rule-update:
+  cmd.run:
+    - name: '/usr/sbin/so-rule-update > /opt/so/log/idstools/download.log 2>&1'
+    - require:
+      - docker_container: so-idstools
+    - onchanges:
+      - file: idstoolsetcsync
+
 {% else %}
 
 {{sls}}_state_not_allowed:
diff --git a/salt/idstools/sync_files.sls b/salt/idstools/sync_files.sls
index cc6c45baa..e8d5edda6 100644
--- a/salt/idstools/sync_files.sls
+++ b/salt/idstools/sync_files.sls
@@ -19,12 +19,6 @@ idstoolsetcsync:
     - group: 939
     - template: jinja
 
-run_so-rule-update:
-  cmd.run:
-    - name: '/usr/sbin/so-rule-update > /opt/so/log/idstools/download.log 2>&1'
-    - onchanges:
-      - file: idstoolsetcsync
-
 rulesdir:
   file.directory:
     - name: /opt/so/rules/nids