CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

add managersearch to allowed roles for so-firewall. fix setup error from so-firewall "Please specify a role with --role="

Browse Source
This commit is contained in:
m0duspwnens
2023-02-02 10:03:22 -05:00
parent 3ba64f7545
commit 9eae31e488
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/common/tools/sbin/so-firewall
View File

@@ -43,7 +43,7 @@ APPLY=${APPLY,,}
function rolecall() { function rolecall() {
THEROLE=$1 THEROLE=$1
THEROLES="analyst analyst_workstations beats_endpoint beats_endpoint_ssl elastic_agent_endpoint elasticsearch_rest endgame eval heavynodes idh manager receivers searchnodes sensors standalone strelka_frontend syslog" THEROLES="analyst analyst_workstations beats_endpoint beats_endpoint_ssl elastic_agent_endpoint elasticsearch_rest endgame eval heavynodes idh manager managersearch receivers searchnodes sensors standalone strelka_frontend syslog"
for AROLE in $THEROLES; do for AROLE in $THEROLES; do
if [ "$AROLE" = "$THEROLE" ]; then if [ "$AROLE" = "$THEROLE" ]; then

4
setup/so-functions
View File

@@ -1179,8 +1179,8 @@ firewall_generate_templates() {
logCmd "cp ../files/firewall/* /opt/so/saltstack/local/salt/firewall/" logCmd "cp ../files/firewall/* /opt/so/saltstack/local/salt/firewall/"
for i in analyst beats_endpoint endgame sensor manager minion elastic_agent_endpoint search_node; do for i in analyst beats_endpoint endgame sensors manager managersearch elastic_agent_endpoint searchnodes; do
$default_salt_dir/salt/common/tools/sbin/so-firewall includehost "$i" 127.0.0.1 $default_salt_dir/salt/common/tools/sbin/so-firewall --role="$i" --ip=127.0.0.1
done done
} }