CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-24 05:31:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

move suricata rules to /opt/so/rules/nids/suri

Browse Source
This commit is contained in:
m0duspwnens
2024-02-09 09:47:23 -05:00
parent f02f61c6dd
commit 5903ae596c
7 changed files with 16 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/suricata/config.sls
View File

@@ -84,12 +84,12 @@ suridatadir:
- mode: 770
- makedirs: True
# salt:// would resolve to /opt/so/rules because of the defined file_roots and
# nids not existing under /opt/so/saltstack/local/salt or /opt/so/saltstack/default/salt
# salt:// would resolve to /opt/so/rules/nids because of the defined file_roots and
# not existing under /opt/so/saltstack/local/salt or /opt/so/saltstack/default/salt
surirulesync:
file.recurse:
- name: /opt/so/conf/suricata/rules/
- source: salt://nids/
- source: salt://suricata/
- user: 940
- group: 940
- show_changes: False

4
salt/suricata/manager.sls
View File

@@ -13,7 +13,7 @@ ruleslink:
- name: /opt/so/saltstack/local/salt/suricata/rules
- user: socore
- group: socore
- target: /opt/so/rules/nids
- target: /opt/so/rules/nids/suri
refresh_salt_master_fileserver_suricata_ruleslink:
salt.runner:
@@ -27,4 +27,4 @@ refresh_salt_master_fileserver_suricata_ruleslink:
test.fail_without_changes:
- name: {{sls}}_state_not_allowed
{% endif %}
{% endif %}