From e1147398cc9c59977217551857c9fb3534b04071 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Tue, 24 Nov 2020 15:48:46 -0500
Subject: [PATCH] Ensure /nsm/wazuh is owned by ossec

---
 salt/wazuh/init.sls | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/salt/wazuh/init.sls b/salt/wazuh/init.sls
index d78d7908a..25f1c0eb8 100644
--- a/salt/wazuh/init.sls
+++ b/salt/wazuh/init.sls
@@ -70,6 +70,13 @@ wazuhagentconf:
     - template: jinja
 
 wazuhdir:
+ file.directory:
+   - name: /nsm/wazuh
+   - user: 945
+   - group: 945
+   - makedirs: True
+
+wazuhetcdir:
  file.directory:
    - name: /nsm/wazuh/etc
    - user: 945