diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index dfc5c3753..8eb222e01 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1006,6 +1006,7 @@ soc: baseUrl: / maxPacketCount: 5000 htmlDir: html + importUploadDir: /opt/sensoroni/uploads airgapEnabled: false modules: cases: soc diff --git a/salt/soc/enabled.sls b/salt/soc/enabled.sls index bc55f2d94..c5e116db2 100644 --- a/salt/soc/enabled.sls +++ b/salt/soc/enabled.sls @@ -1,5 +1,5 @@ # Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one -# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at +# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at # https://securityonion.net/license; you may not use this file except in compliance with the # Elastic License 2.0. @@ -23,6 +23,7 @@ so-soc: - ipv4_address: {{ DOCKER.containers['so-soc'].ip }} - binds: - /nsm/soc/jobs:/opt/sensoroni/jobs:rw + - /nsm/soc/uploads:/opt/sensoroni/uploads:rw - /opt/so/log/soc/:/opt/sensoroni/logs/:rw - /opt/so/conf/soc/soc.json:/opt/sensoroni/sensoroni.json:ro - /opt/so/conf/soc/motd.md:/opt/sensoroni/html/motd.md:ro diff --git a/salt/soc/files/bin/salt-relay.sh b/salt/soc/files/bin/salt-relay.sh index 3e893e64c..22be8d3e4 100755 --- a/salt/soc/files/bin/salt-relay.sh +++ b/salt/soc/files/bin/salt-relay.sh @@ -185,7 +185,8 @@ function send_file() { log "Cleanup: $cleanup" log "encrypting..." - gpg --passphrase "infected" --batch --symmetric --cipher-algo AES256 "$from" + response=$(gpg --passphrase "infected" --batch --symmetric --cipher-algo AES256 "$from") + log Response:$'\n'"$response" fromgpg="$from.gpg" filename=$(basename "$fromgpg")