From aabaf811700711633a6657b4c2462168bfe8bad4 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Fri, 23 Feb 2018 08:33:37 -0500
Subject: [PATCH] Steno Salt Module - new and improved

---
 salt/pcap/files/config |  2 +-
 salt/pcap/init.sls     | 12 ++++++++++--
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/salt/pcap/files/config b/salt/pcap/files/config
index 8a4548ea4..57dc3bc1a 100644
--- a/salt/pcap/files/config
+++ b/salt/pcap/files/config
@@ -11,6 +11,6 @@
   , "Interface": "{{ interface }}"
   , "Port": 1234
   , "Host": "127.0.0.1"
-  , "Flags": []
+  , "Flags": ["-v"]
   , "CertPath": "/etc/stenographer/certs"
 }
diff --git a/salt/pcap/init.sls b/salt/pcap/init.sls
index 14af23775..077087757 100644
--- a/salt/pcap/init.sls
+++ b/salt/pcap/init.sls
@@ -39,10 +39,17 @@ stenoconf:
   file.managed:
     - name: /opt/so/conf/steno/config
     - source: salt://pcap/files/config
-    - user: 941
-    - group: 939
+    - user: root
+    - group: root
+    - mode: 644
     - template: jinja
 
+stenoca:
+  file.directory:
+    - name: /opt/so/conf/steno/certs
+    - user: root
+    - group: root
+
 pcapdir:
   file.directory:
     - name: /nsm/pcap
@@ -62,6 +69,7 @@ so-steno:
     - image: toosmooth/so-steno:test2
     - network_mode: host
     - priviledged: true
+    - user: 941
     - binds:
       - /opt/so/conf/steno/certs:/etc/stenographer/certs:rw
       - /opt/so/conf/steno/config:/etc/stenographer/config:rw