CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reduce cron noise; ensure filecheck is restarted if modified

Browse Source
This commit is contained in:
Jason Ertel
2022-12-07 08:36:56 -05:00
parent 2240283457
commit e849783a86
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/soc/init.sls
View File

@@ -88,7 +88,7 @@ socusersroles:
salt-relay: salt-relay:
cron.present: cron.present:
- name: 'ps -ef | grep salt-relay | grep -v grep || /opt/so/saltstack/default/salt/soc/files/bin/salt-relay.sh >> /opt/so/log/soc/salt-relay.log 2>&1 &' - name: 'pgrep -f "/opt/so/saltstack/default/salt/soc/files/bin/salt-relay.sh" &> /dev/null || /opt/so/saltstack/default/salt/soc/files/bin/salt-relay.sh >> /opt/so/log/soc/salt-relay.log 2>&1 &'
so-soc: so-soc:
docker_container.running: docker_container.running:

10
salt/strelka/init.sls
View File

@@ -144,9 +144,17 @@ filecheck_script:
- group: 939 - group: 939
- mode: 755 - mode: 755
filecheck_restart:
cmd.run:
- name: pkill -f "python3 /opt/so/conf/strelka/filecheck"
- hide_output: True
- success_retcodes: [0,1]
- onchanges:
- file: filecheck_script
filecheck_run: filecheck_run:
cron.present: cron.present:
- name: 'ps -ef | grep filecheck | grep -v grep || python3 /opt/so/conf/strelka/filecheck >> /opt/so/log/strelka/filecheck_stdout.log 2>&1 &' - name: 'pgrep -f "python3 /opt/so/conf/strelka/filecheck" &> /dev/null >> /opt/so/log/strelka/filecheck_stdout.log 2>&1 &'
- user: {{ filecheck_runas }} - user: {{ filecheck_runas }}
filcheck_history_clean: filcheck_history_clean: