CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #14949 from Security-Onion-Solutions/reyesj2-patch-7

Browse Source 
update pcap permissions when no stenographer user exists
This commit is contained in:
Jorge Reyes
2025-08-21 08:33:30 -05:00
committed by GitHub
parent 6fae4a9974 d77556c672
commit f72996d9d1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/pcap/init.sls
View File

@@ -23,7 +23,7 @@ include:
# /nsm/pcap is empty until stenographer is used as pcap engine
{% set pcap_id = 941 %}
{% set user_list = salt['user.list_users']() %}
{% if 'stenographer' not in user_list %}
{% if GLOBALS.pcap_engine == "SURICATA" and 'stenographer' not in user_list %}
{% set pcap_id = 939 %}
{% endif %}
pcapdir: