From c0c01f0d17fe6c9e3cf45b1fe9136d5c4ea1650f Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 5 Aug 2024 16:50:19 -0400
Subject: [PATCH] lock and unlock salt in soup

---
 salt/manager/tools/sbin/soup | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/salt/manager/tools/sbin/soup b/salt/manager/tools/sbin/soup
index 221eb3799..d59cb8ccb 100755
--- a/salt/manager/tools/sbin/soup
+++ b/salt/manager/tools/sbin/soup
@@ -957,7 +957,9 @@ upgrade_salt() {
   if [[ $is_rpm ]]; then
     echo "Removing yum versionlock for Salt."
     echo ""
-    yum versionlock delete "salt-*"
+    yum versionlock delete "salt-0:$INSTALLEDSALTVERSION-0.*"
+    yum versionlock delete "salt-minion-0:$INSTALLEDSALTVERSION-0.*"
+    yum versionlock delete "salt-master-0:$INSTALLEDSALTVERSION-0.*"
     echo "Updating Salt packages."
     echo ""
     set +e
@@ -975,7 +977,9 @@ upgrade_salt() {
     set -e
     echo "Applying yum versionlock for Salt."
     echo ""
-    yum versionlock add "salt-*"
+    yum versionlock add "salt-0:$NEWSALTVERSION-0.*"
+    yum versionlock add "salt-minion-0:$NEWSALTVERSION-0.*"
+    yum versionlock add "salt-master-0:$NEWSALTVERSION-0.*"
   # Else do Ubuntu things
   elif [[ $is_deb ]]; then
     echo "Removing apt hold for Salt."