From b3ea4194dd8e700edf41f978e9d56bb19cb06ae4 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Thu, 23 Mar 2023 09:49:02 -0400
Subject: [PATCH] Only allow reposync to run on managers

---
 salt/common/tools/sbin/so-repo-sync | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/salt/common/tools/sbin/so-repo-sync b/salt/common/tools/sbin/so-repo-sync
index c69aa44ad..1c09ae60d 100644
--- a/salt/common/tools/sbin/so-repo-sync
+++ b/salt/common/tools/sbin/so-repo-sync
@@ -7,6 +7,11 @@
 
 . /usr/sbin/so-common
 
+if [ ! -f /root/repodownload.conf ]; then
+    echo "This script should only run on the manager."
+    exit 1
+fi
+
 set_version
 set_os
 salt_minion_count