CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add container to so-status when enabling/disabling ml module

Browse Source
This commit is contained in:
William Wernert
2021-07-29 14:25:20 -04:00
parent 44551ea9ee
commit 9e92f6da3d
1 changed files with 35 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
salt/common/tools/sbin/so-learn
View File

@@ -28,6 +28,7 @@ import yaml
import multiprocessing import multiprocessing
minion_pillar_dir = '/opt/so/saltstack/local/pillar/minions' minion_pillar_dir = '/opt/so/saltstack/local/pillar/minions'
so_status_conf = '/opt/so/conf/so-status/so-status.conf'
salt_proc: subprocess.CompletedProcess = None salt_proc: subprocess.CompletedProcess = None
# Temp store of modules, will likely be broken out into salt # Temp store of modules, will likely be broken out into salt
@@ -79,8 +80,8 @@ def find_minion_pillar() -> str:
def read_pillar(pillar: str): def read_pillar(pillar: str):
try: try:
with open(pillar, 'r') as f: with open(pillar, 'r') as pillar_file:
loaded_yaml = yaml.safe_load(f.read()) loaded_yaml = yaml.safe_load(pillar_file.read())
if loaded_yaml is None: if loaded_yaml is None:
print(f'Could not parse {pillar}', file=sys.stderr) print(f'Could not parse {pillar}', file=sys.stderr)
sys.exit(3) sys.exit(3)
@@ -92,13 +93,31 @@ def read_pillar(pillar: str):
def write_pillar(pillar: str, content: dict): def write_pillar(pillar: str, content: dict):
try: try:
with open(pillar, 'w') as f: with open(pillar, 'w') as pillar_file:
yaml.dump(content, f, default_flow_style=False) yaml.dump(content, pillar_file, default_flow_style=False)
except: except:
print(f'Could not open {pillar}', file=sys.stderr) print(f'Could not open {pillar}', file=sys.stderr)
sys.exit(3) sys.exit(3)
def mod_so_status(action: str, items: str):
with open(so_status_conf, 'a+') as conf:
conf.seek(0)
containers = conf.readlines()
for item in items:
if f'so-{item}' in containers:
if action == 'remove': containers.remove(f'so-{item}')
if action == 'add': pass
else:
if action == 'remove': pass
if action == 'add': containers.append(f'so-{item}')
conf.seek(0)
conf.truncate(0)
conf.writelines(containers)
def create_pillar_if_not_exist(pillar:str, content: dict): def create_pillar_if_not_exist(pillar:str, content: dict):
pillar_dict = content pillar_dict = content
@@ -141,21 +160,26 @@ def check_apply(args: dict):
def enable_disable_modules(args, enable: bool): def enable_disable_modules(args, enable: bool):
pillar_modules = args.pillar_dict.get('learn', {}).get('modules') pillar_modules = args.pillar_dict.get('learn', {}).get('modules')
pillar_mod_names = args.pillar_dict.get('learn', {}).get('modules').keys()
action_str = 'add' if enable else 'remove'
if 'all' in args.modules: if 'all' in args.modules:
for module in pillar_modules: for module, details in pillar_modules.items():
module['enabled'] = enable details['enabled'] = enable
mod_so_status(action_str, module)
args.pillar_dict.update() args.pillar_dict.update()
write_pillar(args.pillar, args.pillar_dict) write_pillar(args.pillar, args.pillar_dict)
else: else:
write_needed = False write_needed = False
for module in args.modules: for module in args.modules:
if module in pillar_modules: if module in pillar_mod_names:
if pillar_modules[module]['enabled'] == enable: if pillar_modules[module]['enabled'] == enable:
action_str = 'enabled' if enable else 'disabled' state_str = 'enabled' if enable else 'disabled'
print(f'{module} module already {action_str}.', file=sys.stderr) print(f'{module} module already {state_str}.', file=sys.stderr)
else: else:
pillar_modules[module]['enabled'] = enable pillar_modules[module]['enabled'] = enable
mod_so_status(action_str, module)
write_needed = enable write_needed = enable
if write_needed: if write_needed:
args.pillar_dict.update() args.pillar_dict.update()
@@ -167,10 +191,12 @@ def enable_disable_modules(args, enable: bool):
def enable_modules(args): def enable_modules(args):
enable_disable_modules(args, enable=True) enable_disable_modules(args, enable=True)
mod_so_status('add', args.modules)
def disable_modules(args): def disable_modules(args):
enable_disable_modules(args, enable=False) enable_disable_modules(args, enable=False)
mod_so_status('remove', args.modules)
def list_modules(*_): def list_modules(*_):