CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

IDH - states allowed

Browse Source
This commit is contained in:
Josh Brower
2022-02-09 13:57:18 -05:00
parent 30c40ed3d7
commit f31fbbf1ed
5 changed files with 7 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/allowed_states.map.jinja
View File

@@ -248,7 +248,7 @@
{% do allowed_states.append('strelka') %} {% do allowed_states.append('strelka') %}
{% endif %} {% endif %}
{% if WAZUH and grains.role in ['so-eval', 'so-manager', 'so-standalone', 'so-node', 'so-managersearch', 'so-heavynode', 'so-receiver']%} {% if WAZUH and grains.role in ['so-eval', 'so-manager', 'so-standalone', 'so-node', 'so-managersearch', 'so-heavynode', 'so-receiver','so-idh']%}
{% do allowed_states.append('wazuh') %} {% do allowed_states.append('wazuh') %}
{% endif %} {% endif %}

12
salt/idh/Dockerfile
View File

@@ -1,12 +0,0 @@
FROM python:3.6-slim
WORKDIR /root/
RUN rm /bin/sh && ln -s /bin/bash /bin/sh
RUN apt update && apt-get install -y sudo supervisor && rm -rf /var/lib/apt/lists/*
RUN pip install opencanary
ADD supervise-opencanary.conf /etc/supervisor/conf.d/supervise-opencanary.conf
CMD ["/usr/bin/supervisord", "-n"]

4
salt/idh/init.sls
View File

@@ -1,3 +1,7 @@
{% set VERSION = salt['pillar.get']('global:soversion', 'HH1.2.2') %}
{% set IMAGEREPO = salt['pillar.get']('global:imagerepo') %}
{% set MANAGER = salt['grains.get']('master') %}
# IDH State # IDH State
# Create a config directory # Create a config directory

4
salt/idh/supervise-opencanary.conf
View File

@@ -1,4 +0,0 @@
[program:opencanaryd]
command=/usr/local/bin/opencanaryd --start
redirect_stderr=true
autorestart=true

4
setup/so-setup
View File

@@ -253,7 +253,7 @@ elif [ "$install_type" = 'FLEET' ]; then
OSQUERY=1 OSQUERY=1
elif [ "$install_type" = 'IDH' ]; then elif [ "$install_type" = 'IDH' ]; then
is_minion=true is_minion=true
is_idh_standalone=true is_idh=true
IDH=1 IDH=1
elif [ "$install_type" = 'HELIXSENSOR' ]; then elif [ "$install_type" = 'HELIXSENSOR' ]; then
is_helix=true is_helix=true
@@ -809,7 +809,7 @@ echo "1" > /root/accept_changes
set_progress_str 62 "$(print_salt_state_apply 'common')" set_progress_str 62 "$(print_salt_state_apply 'common')"
salt-call state.apply -l info common >> $setup_log 2>&1 salt-call state.apply -l info common >> $setup_log 2>&1
if [[ ! $is_helix && ! $is_receiver ]]; then if [[ ! $is_helix && ! $is_receiver && ! $is_idh ]]; then
set_progress_str 62 "$(print_salt_state_apply 'nginx')" set_progress_str 62 "$(print_salt_state_apply 'nginx')"
salt-call state.apply -l info nginx >> $setup_log 2>&1 salt-call state.apply -l info nginx >> $setup_log 2>&1
fi fi