From bf5df1ac51a5bcd19e41a7f1ad5fde87b82275c5 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 2 Nov 2022 09:57:07 -0400
Subject: [PATCH] Add Strelka Filecheck

---
 salt/common/init.sls | 12 ++++++------
 salt/zeek/init.sls   |  3 +++
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/salt/common/init.sls b/salt/common/init.sls
index 5bb1051b6..a03eaacde 100644
--- a/salt/common/init.sls
+++ b/salt/common/init.sls
@@ -33,15 +33,15 @@ socore:
 soconfperms:
   file.directory:
     - name: /opt/so/conf
-    - uid: 939
-    - gid: 939
+    - user: 939
+    - group: 939
     - dir_mode: 770
 
 sostatusconf:
   file.directory:
     - name: /opt/so/conf/so-status
-    - uid: 939
-    - gid: 939
+    - user: 939
+    - group: 939
     - dir_mode: 770
 
 so-status.conf:
@@ -52,8 +52,8 @@ so-status.conf:
 sosaltstackperms:
   file.directory:
     - name: /opt/so/saltstack
-    - uid: 939
-    - gid: 939
+    - user: 939
+    - group: 939
     - dir_mode: 770
 
 so_log_perms:
diff --git a/salt/zeek/init.sls b/salt/zeek/init.sls
index b1130ee43..5cc6310b9 100644
--- a/salt/zeek/init.sls
+++ b/salt/zeek/init.sls
@@ -56,12 +56,15 @@ zeekextractdir:
     - name: /nsm/zeek/extracted
     - user: 937
     - group: 939
+    - mode: 770
     - makedirs: True
 
 zeekextractcompletedir:
   file.directory:
     - name: /nsm/zeek/extracted/complete
     - user: 937
+    - group: 939
+    - mode: 770
     - makedirs: True
 
 # Sync the policies