CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

change role names in so-firewall-minion

Browse Source
This commit is contained in:
m0duspwnens
2023-01-06 11:09:09 -05:00
parent cb1822a62d
commit 4aacc6d1db
1 changed files with 10 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
salt/common/tools/sbin/so-firewall-minion
View File

@@ -49,33 +49,30 @@ fi
case "$ROLE" in
'MANAGER')
so-firewall includehost manager "$IP"
so-firewall --apply includehost minion "$IP"
so-firewall --role=manager --ip="$IP"
;;
'EVAL' | 'MANAGERSEARCH' | 'STANDALONE' | 'IMPORT')
so-firewall includehost manager "$IP"
so-firewall includehost minion "$IP"
so-firewall includehost sensor "$IP"
so-firewall --apply includehost search_node "$IP"
so-firewall --role=manager --ip="$IP"
so-firewall --role=sensors --ip="$IP"
so-firewall --apply --role=searchnodes --ip="$IP"
;;
'SENSOR' | 'SEARCHNODE' | 'HEAVYNODE' | 'IDH' | 'RECEIVER')
so-firewall includehost minion "$IP"
case "$ROLE" in
'SENSOR')
so-firewall --apply includehost sensor "$IP"
so-firewall --apply --role=sensors --ip="$IP"
;;
'SEARCHNODE')
so-firewall --apply includehost search_node "$IP"
so-firewall --apply --role=searchnodes --ip="$IP"
;;
'HEAVYNODE')
so-firewall includehost sensor "$IP"
so-firewall --apply includehost heavy_node "$IP"
so-firewall --role=sensors --ip="$IP"
so-firewall --apply --role=heavynodes --ip="$IP"
;;
'IDH')
so-firewall --apply includehost beats_endpoint_ssl "$IP"
so-firewall --apply --role=beats_endpoint_ssl --ip="$IP"
;;
'RECEIVER')
so-firewall --apply includehost receiver "$IP"
so-firewall --apply --role=receivers --ip="$IP"
;;
esac
;;