CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Re-Work IDSTOOLS

Browse Source
This commit is contained in:
Mike Reeves
2023-03-15 17:19:33 -04:00
parent 28dc490775
commit afcd1155bf
3 changed files with 6 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/idstools/defaults.yaml
View File

@@ -3,3 +3,7 @@ idstools:
urls: [] urls: []
ruleset: ETOPEN ruleset: ETOPEN
oinkcode: "" oinkcode: ""
sids:
enabled: []
isabled: []
modify: []

2
salt/idstools/etc/rulecat.conf
View File

@@ -1,6 +1,6 @@
{%- from 'vars/globals.map.jinja' import GLOBALS %} {%- from 'vars/globals.map.jinja' import GLOBALS %}
{%- import_yaml 'idstools/defaults.yaml' as IDSTOOLSDEFAULTS %} {%- import_yaml 'idstools/defaults.yaml' as IDSTOOLSDEFAULTS %}
{%- set IDSTOOLSMERGED = salt['pillar.get']('idstools', IDSTOOLSDEFAULTS, merge=True) %} {%- set IDSTOOLSMERGED = salt['pillar.get']('idstools', IDSTOOLSDEFAULTS.idstools, merge=True) %}
{%- if GLOBALS.airgap is sameas true -%} {%- if GLOBALS.airgap is sameas true -%}
--merged=/opt/so/rules/nids/all.rules --merged=/opt/so/rules/nids/all.rules
--local=/opt/so/rules/nids/local.rules --local=/opt/so/rules/nids/local.rules

11
setup/so-functions
View File

@@ -1359,17 +1359,6 @@ ls_heapsize() {
idstools_pillar() { idstools_pillar() {
title "Ading IDSTOOLS pillar options" title "Ading IDSTOOLS pillar options"
touch $adv_idstools_pillar_file touch $adv_idstools_pillar_file
printf '%s\n'\
"idstools:"\
" config:"\
" oinkcode: ''"\
" urls: []"\
" sids:"\
" enabled: []"\
" disabled: []"\
" modify: []"\
"" > "$idstools_pillar_file"
} }
soc_pillar() { soc_pillar() {