From 67a9f4d22ed08703ab12f457077999837c3d21d7 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 28 Dec 2021 12:03:10 -0500
Subject: [PATCH] put x509 signing policies in place when minion is configured

---
 setup/so-functions | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/setup/so-functions b/setup/so-functions
index 94fe17426..a5383d9b4 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -760,9 +760,11 @@ configure_minion() {
 
 	case "$minion_type" in
 		'helix')
+			cp -f ../salt/ca/files/signing_policies.conf /etc/salt/minion.d/signing_policies.conf
 			echo "master: '$HOSTNAME'" >> "$minion_config"
 			;;
 		'manager' | 'eval' | 'managersearch' | 'standalone' | 'import')
+			cp -f ../salt/ca/files/signing_policies.conf /etc/salt/minion.d/signing_policies.conf
 			printf '%s\n'\
 				"master: '$HOSTNAME'"\
 				"mysql.host: '$MAINIP'"\