CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-04 15:23:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

lock and unlock master during soup

Browse Source
This commit is contained in:
m0duspwnens
2020-08-19 11:46:29 -04:00
parent f57e0fbc56
commit 2f0ffffca4
1 changed files with 10 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
salt/common/tools/sbin/soup
View File

@@ -88,25 +88,19 @@ highstate() {
}
masterlock() {
# Lock the ACL to just the manager
cp -v /etc/salt/master /etc/salt/master.upgrade
echo "peer:" >> /etc/salt/master
echo " *_manager:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
echo " *_standalone:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
echo " *_managersearch:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
echo " *_eval:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
echo " *_helix:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
echo " *_import:" >> /etc/salt/master
echo " - .*" >> /etc/salt/master
TOPFILE=/opt/so/saltstack/default/salt/top.sls
BACKUPTOPFILE=/opt/so/saltstack/default/salt/top.sls.backup
mv -v $TOPFILE $BACKUPTOPFILE
echo "base:" > $TOPFILE
echo " $MINIONID:" >> $TOPFILE
echo " - ca" >> $TOPFILE
echo " - ssl" >> $TOPFILE
echo " - elasticsearch" >> $TOPFILE
}
masterunlock() {
mv /etc/salt/master.upgrade /etc/salt/master
mv -v $BACKUPTOPFILE $TOPFILE
}
pillar_changes() {