diff --git a/README.md b/README.md index b07bae8ca..0732601d7 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ ## Security Onion 2.3.90-WAZUH -Security Onion 2.3.90-WAZUH is here! +Security Onion 2.3.90-AIRGAPFIX is here! ## Screenshots diff --git a/VERIFY_ISO.md b/VERIFY_ISO.md index 502a44a9b..218a703d6 100644 --- a/VERIFY_ISO.md +++ b/VERIFY_ISO.md @@ -1,18 +1,18 @@ -### 2.3.90-WAZUH ISO image built on 2021/11/23 +### 2.3.90-AIRGAPFIX ISO image built on 2021/12/01 ### Download and Verify -2.3.90-WAZUH ISO image: -https://download.securityonion.net/file/securityonion/securityonion-2.3.90-WAZUH.iso +2.3.90-AIRGAPFIX ISO image: +https://download.securityonion.net/file/securityonion/securityonion-2.3.90-AIRGAPFIX.iso -MD5: B7141C8627CDB45F4A8741B2ADE4A9F3 -SHA1: 16087B385CA651659EC98F139AFDF90922430FB6 -SHA256: 667AF11BBCFE3248AF59E45043703B55A543E059899AE387FF55EB8077304F04 +MD5: A87EEF66FEB2ED6E20ABD4ADDA4899C6 +SHA1: D1AD74D1481E9FF6F1A79D27DC569DA6749EC54B +SHA256: E4FC40340357B098E881F13BC4960AA8CB5F5AC73C05E077C993078ED7F46D59 Signature for ISO image: -https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-WAZUH.iso.sig +https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-AIRGAPFIX.iso.sig Signing key: https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/master/KEYS @@ -26,22 +26,22 @@ wget https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/ma Download the signature file for the ISO: ``` -wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-WAZUH.iso.sig +wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-AIRGAPFIX.iso.sig ``` Download the ISO image: ``` -wget https://download.securityonion.net/file/securityonion/securityonion-2.3.90-WAZUH.iso +wget https://download.securityonion.net/file/securityonion/securityonion-2.3.90-AIRGAPFIX.iso ``` Verify the downloaded ISO image using the signature file: ``` -gpg --verify securityonion-2.3.90-WAZUH.iso.sig securityonion-2.3.90-WAZUH.iso +gpg --verify securityonion-2.3.90-AIRGAPFIX.iso.sig securityonion-2.3.90-AIRGAPFIX.iso ``` The output should show "Good signature" and the Primary key fingerprint should match what's shown below: ``` -gpg: Signature made Tue 23 Nov 2021 03:19:08 PM EST using RSA key ID FE507013 +gpg: Signature made Wed 01 Dec 2021 11:07:16 AM EST using RSA key ID FE507013 gpg: Good signature from "Security Onion Solutions, LLC " gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. diff --git a/salt/common/tools/sbin/soup b/salt/common/tools/sbin/soup index 2244f2735..a4285347b 100755 --- a/salt/common/tools/sbin/soup +++ b/salt/common/tools/sbin/soup @@ -599,7 +599,7 @@ up_to_2.3.80() { up_to_2.3.90() { for i in manager managersearch eval standalone; do - if compgen -G "/opt/so/saltstack/local/pillar/minions/*_$i.sls" > /dev/null; then + if compgen -G "/opt/so/saltstack/local/pillar/minions/*_$i.sls"; then echo "soc:" >> /opt/so/saltstack/local/pillar/minions/*_$i.sls sed -i "/^soc:/a \\ es_index_patterns: '*:so-*,*:endgame-*'" /opt/so/saltstack/local/pillar/minions/*_$i.sls fi diff --git a/salt/repo/client/init.sls b/salt/repo/client/init.sls index f6fbdb6f3..a32287332 100644 --- a/salt/repo/client/init.sls +++ b/salt/repo/client/init.sls @@ -65,6 +65,10 @@ yumconf: - mode: 644 - template: jinja - show_changes: False + +cleanairgap: + file.absent: + - name: /etc/yum.repos.d/airgap_repo.repo {% endif %} cleanyum: diff --git a/setup/so-setup b/setup/so-setup index 1893d252b..159367793 100755 --- a/setup/so-setup +++ b/setup/so-setup @@ -318,7 +318,7 @@ if ! [[ -f $install_opt_file ]]; then elif [[ $is_minion && $is_iso ]]; then $sshcmd -i /root/.ssh/so.key soremote@"$MSRV" [[ -f /etc/yum.repos.d/airgap_repo.repo ]] >> $setup_log 2>&1 airgap_check=$? - [[ $airgap_check ]] && is_airgap=true >> $setup_log 2>&1 + [[ $airgap_check == 0 ]] && is_airgap=true >> $setup_log 2>&1 fi reset_proxy diff --git a/sigs/securityonion-2.3.90-AIRGAPFIX.iso.sig b/sigs/securityonion-2.3.90-AIRGAPFIX.iso.sig new file mode 100644 index 000000000..05b411eac Binary files /dev/null and b/sigs/securityonion-2.3.90-AIRGAPFIX.iso.sig differ