CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-18 06:01:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

Re-Work IDSTOOLS

Browse Source
This commit is contained in:
Mike Reeves
2023-03-15 17:19:33 -04:00
parent 28dc490775
commit afcd1155bf
3 changed files with 6 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/idstools/defaults.yaml
View File

@@ -2,4 +2,8 @@ idstools:
config:
urls: []
ruleset: ETOPEN
oinkcode: ""
oinkcode: ""
sids:
enabled: []
isabled: []
modify: []

2
salt/idstools/etc/rulecat.conf
View File

@@ -1,6 +1,6 @@
{%- from 'vars/globals.map.jinja' import GLOBALS %}
{%- import_yaml 'idstools/defaults.yaml' as IDSTOOLSDEFAULTS %}
{%- set IDSTOOLSMERGED = salt['pillar.get']('idstools', IDSTOOLSDEFAULTS, merge=True) %}
{%- set IDSTOOLSMERGED = salt['pillar.get']('idstools', IDSTOOLSDEFAULTS.idstools, merge=True) %}
{%- if GLOBALS.airgap is sameas true -%}
--merged=/opt/so/rules/nids/all.rules
--local=/opt/so/rules/nids/local.rules