CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #13855 from Security-Onion-Solutions/issue/204

Browse Source 
fix HELD for debian families
This commit is contained in:
Josh Patterson
2024-10-23 09:40:25 -04:00
committed by GitHub
parent 2b4dfbe2ca 8cc530dd4c
commit 36a2bffdc7
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
salt/versionlock/map.jinja
View File

@@ -5,7 +5,12 @@
{% import_yaml 'versionlock/defaults.yaml' as VERSIONLOCKDEFAULTS %}
{% set VERSIONLOCKMERGED = salt['pillar.get']('versionlock', VERSIONLOCKDEFAULTS.versionlock, merge=True) %}
{% set HELD = salt['pkg.list_holds']() %}
{% if grains.os_family == 'RedHat' %}
{% set HELD = salt['pkg.list_holds']() %}
{% else %}
{% set HELD = salt['pkg.get_selections'](state='hold')['hold'] %}
{% endif %}
{# these are packages held / versionlock in other states #}
{% set PACKAGES_HELD_IN_OTHER_STATES = [

2
salt/versionlock/soc_versionlock.yaml
View File

@@ -1,6 +1,6 @@
versionlock:
hold:
description: List of packages to prevent from upgrading. To reduce the frequency of required reboots, add 'kernel' to this list.
description: List of packages to prevent from upgrading. To reduce the frequency of required reboots, add 'kernel' to this list for RedHat based OS families. For Debian, please see the documentation.
global: True
forcedType: "[]string"
multiline: True