CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix issue with first-time api client permission toggling

Browse Source
This commit is contained in:
Jason Ertel
2025-01-22 17:41:04 -05:00
parent 704e30219a
commit db9387764d
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/manager/sync_es_users.sls
View File

@@ -20,13 +20,11 @@ sync_es_users:
- /opt/so/saltstack/local/salt/elasticsearch/files/users - /opt/so/saltstack/local/salt/elasticsearch/files/users
- /opt/so/saltstack/local/salt/elasticsearch/files/users_roles - /opt/so/saltstack/local/salt/elasticsearch/files/users_roles
- /opt/so/conf/soc/soc_users_roles - /opt/so/conf/soc/soc_users_roles
- /opt/so/conf/soc/soc_clients_roles
- show_changes: False - show_changes: False
- require: - require:
- docker_container: so-kratos - docker_container: so-kratos
- http: wait_for_kratos - http: wait_for_kratos
- file: so-user.lock # require so-user.lock file to be missing - file: so-user.lock # require so-user.lock file to be missing
- file: so-client.lock # require so-client.lock file to be missing
# we dont want this added too early in setup, so we add the onlyif to verify 'startup_states: highstate' # we dont want this added too early in setup, so we add the onlyif to verify 'startup_states: highstate'
# is in the minion config. That line is added before the final highstate during setup # is in the minion config. That line is added before the final highstate during setup

2
salt/manager/tools/sbin/so-client
View File

@@ -150,7 +150,7 @@ function createFile() {
} }
function ensureRoleFileExists() { function ensureRoleFileExists() {
if [[ ! -f "$socRolesFile" || ! -s "$socRolesFile" ]]; then if [[ ! -f "$socRolesFile" ]]; then
# Generate the new roles file # Generate the new roles file
rolesTmpFile="${socRolesFile}.tmp" rolesTmpFile="${socRolesFile}.tmp"
createFile "$rolesTmpFile" "$soUID" "$soGID" createFile "$rolesTmpFile" "$soUID" "$soGID"