diff --git a/setup/so-whiptail b/setup/so-whiptail index 48e74e9b5..b99f306b0 100755 --- a/setup/so-whiptail +++ b/setup/so-whiptail @@ -1028,6 +1028,26 @@ whiptail_shard_count() { } +whiptail_strelka_rules() { + + [ -n "$TESTING" ] && return + + # Ask to inherit from master + whiptail --title "Security Onion Setup" --yesno "Do you want to enable the default YARA rules for Strelka?" 8 75 + + local exitstatus=$? + + if [ $exitstatus == 0 ]; then + export STRELKARULES=1 + else + local exitstatus=$? + whiptail_check_exitstatus $exitstatus + export STRELKARULES + + fi + +} + whiptail_suricata_pins() { [ -n "$TESTING" ] && return