From 230f5868f9ab59ae235d970d5319dd89276bdaab Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 8 Aug 2023 15:14:27 -0400
Subject: [PATCH] sync sorules

---
 salt/idstools/sync_files.sls | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/salt/idstools/sync_files.sls b/salt/idstools/sync_files.sls
index 64479e937..e8d5edda6 100644
--- a/salt/idstools/sync_files.sls
+++ b/salt/idstools/sync_files.sls
@@ -26,6 +26,13 @@ rulesdir:
     - group: 939
     - makedirs: True
 
+SOrulesdir:
+  file.directory:
+    - name: /opt/so/rules/nids/sorules
+    - user: 939
+    - group: 939
+    - makedirs: True
+
 # Don't show changes because all.rules can be large
 synclocalnidsrules:
   file.recurse:
@@ -35,3 +42,13 @@ synclocalnidsrules:
     - group: 939
     - show_changes: False
     - include_pat: 'E@.rules'
+
+# Don't show changes because all.rules can be large
+syncnidsSOrules:
+  file.recurse:
+    - name: /opt/so/rules/nids/sorules
+    - source: salt://idstools/sorules/
+    - user: 939
+    - group: 939
+    - show_changes: False
+    - include_pat: 'E@.rules'