2.4 strelka

salt/manager/init.sls

@@ -5,6 +5,9 @@
 
 {% from 'allowed_states.map.jinja' import allowed_states %}
 {% if sls in allowed_states %}
+{% from 'vars/globals.map.jinja' import GLOBALS %}
+{% from 'strelka/map.jinja' import STRELKAMERGED %}
+
 include:
   - salt.minion
   - kibana.secrets
@@ -20,6 +23,18 @@ socore_own_saltstack:
       - user
       - group
 
+yara_update_script:
+  file.managed:
+    - name: /usr/sbin/so-yara-update
+    - source: salt://manager/files/so-yara-update.jinja
+    - user: root
+    - group: root
+    - mode: 755
+    - template: jinja
+    - defaults:
+        ISAIRGAP: {{ GLOBALS.airgap }}
+        EXCLUDEDRULES: {{ STRELKAMERGED.excluded_rules }}
+
 strelka_yara_update:
   cron.present:
     - user: root