From 304830d2ee479c32899909b590d52fd50b6597e9 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 11 Jul 2023 10:20:04 -0400
Subject: [PATCH] remove old rules prior to copy

---
 salt/manager/tools/sbin_jinja/so-yara-update | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/manager/tools/sbin_jinja/so-yara-update b/salt/manager/tools/sbin_jinja/so-yara-update
index ae2a0d97c..2cb59056c 100755
--- a/salt/manager/tools/sbin_jinja/so-yara-update
+++ b/salt/manager/tools/sbin_jinja/so-yara-update
@@ -18,6 +18,8 @@ SORULEDIR=/nsm/rules/yara
 OUTPUTDIR=/opt/so/saltstack/local/salt/strelka/rules
 
 mkdir -p $OUTPUTDIR
+# remove all rules prior to copy so we can clear out old rules
+rm -f $OUTPUTDIR/*
 
 for i in $(find $SORULEDIR -name "*.yar" -o -name "*.yara"); do
   rule_name=$(echo $i | awk -F '/' '{print $NF}')