CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

hold openssl from update during setup

Browse Source
This commit is contained in:
m0duspwnens
2023-10-02 11:13:08 -04:00
parent c1ab8952eb
commit f85dd910a3
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/common/packages.sls
View File

@@ -47,6 +47,8 @@ python-rich:
{% if GLOBALS.os_family == 'RedHat' %}
# holding these since openssl-devel-1:3.0.7-16.0.1.el9_2 seems to be a requirement for mariadb-devel-3:10.5.16-2.el9_0
# https://github.com/Security-Onion-Solutions/securityonion/discussions/11443
holdversion_openssl:
pkg.held:
- name: openssl

3
setup/so-functions
View File

@@ -2443,7 +2443,8 @@ update_sudoers_for_testing() {
update_packages() {
if [[ $is_oracle ]]; then
logCmd "dnf repolist"
logCmd "dnf -y update --allowerasing --exclude=salt*,docker*,containerd*"
# holding openssl https://github.com/Security-Onion-Solutions/securityonion/discussions/11443
logCmd "dnf -y update --allowerasing --exclude=salt*,docker*,containerd*,openssl*"
RMREPOFILES=("oracle-linux-ol9.repo" "uek-ol9.repo" "virt-ol9.repo")
info "Removing repo files added by oracle-repos package update"
for FILE in ${RMREPOFILES[@]}; do