From 41b3ac75540e59169effa32cc278e8504a19a2ba Mon Sep 17 00:00:00 2001
From: DefensiveDepth <josh@defensivedepth.com>
Date: Tue, 2 Dec 2025 19:58:56 -0500
Subject: [PATCH] Backup salt master config

---
 salt/manager/tools/sbin/soup | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/salt/manager/tools/sbin/soup b/salt/manager/tools/sbin/soup
index 67262dcb0..6cf5921b5 100755
--- a/salt/manager/tools/sbin/soup
+++ b/salt/manager/tools/sbin/soup
@@ -1272,7 +1272,10 @@ fi
 echo "Removing idstools symlink and scripts..."
 rm /opt/so/saltstack/local/salt/suricata/rules
 rm -rf /usr/sbin/so-idstools*
-sed '/^so-idstools$/d' /opt/so/conf/so-status/so-status.conf
+sed -i '/^#\?so-idstools$/d' /opt/so/conf/so-status/so-status.conf
+
+# Backup the salt master config before editing it
+cp /etc/salt/master  /nsm/backup/detections-migration/2-4-200
 so-yaml.py removelistitem /etc/salt/master file_roots.base /opt/so/rules/nids
 
 }