diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index e6b43cf0b..17737abe4 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -47,6 +47,11 @@ soc: global: True advanced: True server: + srvKey: + description: Unique key for protecting the integrity of user submitted data via the web browser. + global: True + sensitive: True + advanced: True maxPacketCount: description: Maximum number of packets to show in the PCAP viewer. Larger values can cause more resource utilization on both the SOC server and the browser. global: True diff --git a/setup/so-functions b/setup/so-functions index 8139b60a1..dc5d21f08 100755 --- a/setup/so-functions +++ b/setup/so-functions @@ -1245,6 +1245,7 @@ generate_passwords(){ SENSORONIKEY=$(get_random_value) KRATOSKEY=$(get_random_value) REDISPASS=$(get_random_value) + SOCSRVKEY=$(get_random_value 64) } generate_interface_vars() { @@ -1380,7 +1381,11 @@ idstools_pillar() { soc_pillar() { title "Creating the SOC pillar" touch $adv_soc_pillar_file - touch $soc_pillar_file + printf '%s\n'\ + "soc:"\ + " server:"\ + " srvKey: '$SOCSRVKEY'"\ + "" > "$soc_pillar_file" } telegraf_pillar() {