From aa4d435020333e39207f9fdc6dd51529114c135a Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Mon, 13 Jul 2020 15:21:05 -0400
Subject: [PATCH] [fix] Don't run so-allow before setup complete menu

---
 setup/so-setup | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/setup/so-setup b/setup/so-setup
index b5f6d1d52..c10ff4737 100755
--- a/setup/so-setup
+++ b/setup/so-setup
@@ -624,10 +624,6 @@ success=$(tail -10 $setup_log | grep Failed | awk '{ print $2}')
 
 if [[ $success != 0 ]]; then SO_ERROR=1; fi # evaluate success first so it doesn't check against the output of so-allow
 
-if [[ -n $ALLOW_ROLE && -n $ALLOW_CIDR ]]; then 
-	IP=$ALLOW_CIDR so-allow -$ALLOW_ROLE >> $setup_log 2>&1
-fi
-
 if [[ -n $SO_ERROR ]]; then 
 	SKIP_REBOOT=1
 	whiptail_setup_failed
@@ -636,6 +632,10 @@ else
 	if [[ $THEHIVE == 1 ]]; then check_hive_init; fi
 fi
 
+if [[ -n $ALLOW_ROLE && -n $ALLOW_CIDR ]]; then 
+	IP=$ALLOW_CIDR so-allow -$ALLOW_ROLE >> $setup_log 2>&1
+fi
+
 install_cleanup >> $setup_log 2>&1
 
 if [[ -z $SKIP_REBOOT ]]; then shutdown -r now; else exit; fi