From 40fa5293bf2d1f087807d8fae929002a54dc5095 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Thu, 28 May 2020 15:54:11 -0400
Subject: [PATCH] move fileserve update to suricata.master

---
 salt/salt/master/refresh_fileserver.sls |  3 ---
 salt/suricata/master.sls                | 18 ++++++++++--------
 2 files changed, 10 insertions(+), 11 deletions(-)
 delete mode 100644 salt/salt/master/refresh_fileserver.sls

diff --git a/salt/salt/master/refresh_fileserver.sls b/salt/salt/master/refresh_fileserver.sls
deleted file mode 100644
index 6b5640796..000000000
--- a/salt/salt/master/refresh_fileserver.sls
+++ /dev/null
@@ -1,3 +0,0 @@
-refresh_salt_master_fileserver:
- saltmod.runner:
-   - name: fileserver.update
\ No newline at end of file
diff --git a/salt/suricata/master.sls b/salt/suricata/master.sls
index 6ad1e7c94..5998a484b 100644
--- a/salt/suricata/master.sls
+++ b/salt/suricata/master.sls
@@ -1,17 +1,19 @@
-include:
-  - salt.master.refresh_fileserver
-
 surilocaldir:
   file.directory:
     - name: /opt/so/saltstack/local/salt/suricata
-    - user: 940
-    - group: 940
+    - user: socore
+    - group: socore
     - makedirs: True
 
 ruleslink:
   file.symlink:
     - name: /opt/so/saltstack/local/salt/suricata/rules
+    - user: socore
+    - group: socore
     - target: /opt/so/rules/nids
-    - watch_in: 
-      - saltmod: refresh_salt_master_fileserver
-    
\ No newline at end of file
+
+refresh_salt_master_fileserver_suricata_ruleslink:
+  salt.runner:
+    - name: fileserver.update
+    - onchanges:
+      - file: ruleslink
\ No newline at end of file