CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

IDSTools Module - change local rules structure

Browse Source
This commit is contained in:
Mike Reeves
2018-04-17 16:43:32 -04:00
parent 085ab40076
commit eff6a767c3
3 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/idstools/etc/rulecat.conf
View File

@@ -1,5 +1,5 @@
--suricata-version 4.0 --suricata-version 4.0
--merged=/opt/so/rules/nids/downloaded.rules --merged=/opt/so/rules/nids/all.rules
--local=/opt/so/rules/nids/local.rules --local=/opt/so/rules/nids/local.rules
--disable=disable.conf --disable=disable.conf
--enable=enable.conf --enable=enable.conf

7
salt/idstools/init.sls
View File

@@ -36,6 +36,13 @@ rulesdir:
- group: 939 - group: 939
- makedirs: True - makedirs: True
synclocalnidsrules:
file.managed:
- name: /opt/so/rules/local.rules
- source: salt://idstools/localrules/local.rules
- user: 939
- group: 939
ruleslink: ruleslink:
file.symlink: file.symlink:
- name: /opt/so/saltstack/salt/idstools/rules - name: /opt/so/saltstack/salt/idstools/rules

0
salt/idstools/etc/local.rules → salt/idstools/localrules/local.rules
View File