diff --git a/salt/manager/init.sls b/salt/manager/init.sls index 502c89579..597ca3c43 100644 --- a/salt/manager/init.sls +++ b/salt/manager/init.sls @@ -88,7 +88,14 @@ append_so-aptcacherng_so-status.conf: {% endif %} -strelka_yara_update_old: +strelka_yara_update_old_1: + cron.absent: + - user: root + - name: '[ -d /opt/so/saltstack/default/salt/strelka/rules/ ] && /usr/sbin/so-yara-update > /dev/null 2>&1' + - hour: '7' + - minute: '1' + +strelka_yara_update_old_2: cron.absent: - user: root - name: '/usr/sbin/so-yara-update > /dev/null 2>&1' diff --git a/salt/suricata/defaults.yaml b/salt/suricata/defaults.yaml index 9f34c0871..49a25917c 100644 --- a/salt/suricata/defaults.yaml +++ b/salt/suricata/defaults.yaml @@ -460,8 +460,6 @@ suricata: enabled: true ports: $VXLAN_PORTS erspan: - typeI: - enabled: false detect: profile: medium custom-values: diff --git a/salt/yum/etc/yum.conf.jinja b/salt/yum/etc/yum.conf.jinja index bef9c2128..5e1d30510 100644 --- a/salt/yum/etc/yum.conf.jinja +++ b/salt/yum/etc/yum.conf.jinja @@ -10,6 +10,7 @@ plugins=1 installonly_limit={{ salt['pillar.get']('yum:config:installonly_limit', 2) }} bugtracker_url=http://bugs.centos.org/set_project.php?project_id=23&ref=http://bugs.centos.org/bug_report_page.php?category=yum distroverpkg=centos-release +clean_requirements_on_remove=1 {% if (grains['role'] not in ['so-eval','so-managersearch', 'so-manager', 'so-standalone']) and salt['pillar.get']('global:managerupdate', '0') %} proxy=http://{{ salt['pillar.get']('yum:config:proxy', salt['config.get']('master')) }}:3142 diff --git a/setup/so-setup b/setup/so-setup index bede7990d..8b8f99b01 100755 --- a/setup/so-setup +++ b/setup/so-setup @@ -175,7 +175,7 @@ if ! [[ -f $install_opt_file ]]; then echo "User cancelled setup." | tee -a "$setup_log" whiptail_cancel fi - if [[ $setup_type == 'iso' ]]; then + if [[ $setup_type == 'iso' ]] && [ "$automated" == no ]; then whiptail_first_menu_iso if [[ $option == "Configure Network" ]]; then network_init_whiptail @@ -184,9 +184,7 @@ if ! [[ -f $install_opt_file ]]; then printf '%s\n' \ "MNIC=$MNIC" \ "HOSTNAME=$HOSTNAME" > "$net_init_file" - whiptail --title "Security Onion Setup" \ - --msgbox "Successfully set up networking, setup will now exit." 7 75 - exit 0 + whiptail_net_setup_complete else whiptail_install_type fi diff --git a/setup/so-whiptail b/setup/so-whiptail index b034ab679..f3e612f70 100755 --- a/setup/so-whiptail +++ b/setup/so-whiptail @@ -662,8 +662,8 @@ whiptail_first_menu_iso() { [ -n "$TESTING" ] && return option=$(whiptail --title "Security Onion Setup" --menu "Select an option" 10 75 2 \ - "Configure Network" "Configure networking only " \ "Security Onion Installer" "Run the standard Security Onion installation " \ + "Configure Network" "Configure networking only " \ 3>&1 1>&2 2>&3 ) local exitstatus=$? @@ -794,6 +794,13 @@ whiptail_management_interface_setup() { whiptail_check_exitstatus $exitstatus } +whiptail_net_setup_complete() { + [ -n "$TESTING" ] && return + + whiptail --title "Security Onion Setup" \ + --msgbox "Successfully set up networking, setup will now exit." 7 75 + exit 0 +} whiptail_management_server() {