Ensure Zeek spool dir is owned by Zeek to allow Zeek to start correctly

2026-01-07 16:53:17 +01:00 · 2021-02-25 08:10:13 -05:00
parent ef7cdf27bf
commit 34dab9009c
1 changed files with 8 additions and 0 deletions
--- a/salt/zeek/init.sls
+++ b/salt/zeek/init.sls
@@ -73,6 +73,14 @@ zeekpolicysync:
    - group: 939
    - template: jinja

+# Ensure the zeek spool tree (and state.db) ownership is correct
+zeekspoolownership:
+  file.directory:
+    - name: /nsm/zeek/spool
+    - user: 937
+    - recurse:
+      - user
+
 # Sync Intel
 zeekintelloadsync:
  file.managed: