From 59af547838100d006f924ad43e302c7aac736bc6 Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Tue, 27 Feb 2024 09:49:54 -0500 Subject: [PATCH 1/2] Fix download location --- salt/soc/soc_soc.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index fa488ab7a..e80e98a7e 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -83,7 +83,7 @@ soc: global: True advanced: False autoUpdateEnabled: - description: 'Set to true to enable automatic updates of the Sigma Community Ruleset.' + description: 'Set to true to enable automatic Internet-connected updates of the Sigma Community Ruleset. If this is an Airgap system, this setting will be overridden and set to false.' global: True advanced: True elastic: @@ -146,7 +146,7 @@ soc: advanced: True strelkaengine: autoUpdateEnabled: - description: 'Set to true to enable automatic updates of the Yara ruleset.' + description: 'Set to true to enable automatic Internet-connected updates of the Yara rulesets. If this is an Airgap system, this setting will be overridden and set to false.' global: True advanced: True client: From e2dd0f8cf17950a6b35d66419085adb167a28e34 Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Wed, 28 Feb 2024 09:39:23 -0500 Subject: [PATCH 2/2] Only update rule files if AG --- salt/manager/tools/sbin/soup | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/salt/manager/tools/sbin/soup b/salt/manager/tools/sbin/soup index 655e99f6c..ba8316116 100755 --- a/salt/manager/tools/sbin/soup +++ b/salt/manager/tools/sbin/soup @@ -935,8 +935,10 @@ main() { preupgrade_changes echo "" - echo "Updating Airgap Rule Files to the Latest." - update_airgap_rules + if [[ $is_airgap -eq 0 ]]; then + echo "Updating Rule Files to the Latest." + update_airgap_rules + fi # since we don't run the backup.config_backup state on import we wont snapshot previous version states and pillars if [[ ! "$MINIONID" =~ "_import" ]]; then