Masaya-A
0d93b15a63
Disable weak cipher suites from influxdb
...
The default config of influxdb enables use of some weak cipher suites such as RC4 and 3DES(SWEET32).
To disable them, a list of enabled ciphers added into influxdb.conf.
2021-01-15 11:47:04 +09:00
William Wernert
dbe22f901d
[fix] Add jinja raw block to so-common
2021-01-14 14:54:37 -05:00
William Wernert
ebc5a4314a
[feat] Add salt logs to log rotation config
2021-01-14 13:43:00 -05:00
William Wernert
df07cc578c
[fix] Only update err if return code is non-zero
2021-01-14 13:20:56 -05:00
William Wernert
2e23e0d690
[fix] Only update err if return code is non-zero
2021-01-14 13:20:29 -05:00
William Wernert
a7b9b565fd
[fix] Only return after all interfaces added to bond0
2021-01-14 13:19:29 -05:00
William Wernert
e7070ef217
Merge pull request #2630 from Security-Onion-Solutions/feature/setup
...
Input validation + so-monitor-add
2021-01-14 13:17:01 -05:00
William Wernert
8793965f4a
[fix] Capitalization
2021-01-14 13:12:12 -05:00
William Wernert
ddcd487edc
[fix] Remove files not in dev
2021-01-14 13:08:11 -05:00
William Wernert
0db439df1e
Merge branch 'dev' into feature/setup
2021-01-14 13:06:32 -05:00
William Wernert
82c7832d60
[fix] Fix indent in valid_hostname
2021-01-14 12:58:21 -05:00
William Wernert
3c22738ae1
[fix] Add example CIDR notation, remove placeholder X.X.X.X
2021-01-14 10:38:47 -05:00
Jason Ertel
9d0dca05b1
Adjusted logic on so-tcpreplay to handle init for standalone/eval nodes
2021-01-13 22:29:58 -05:00
Jason Ertel
2ccf77eaef
Rename network automation files
2021-01-13 17:29:48 -05:00
William Wernert
8245b25835
[fix] Move metadata function
2021-01-13 17:28:19 -05:00
William Wernert
b68685e00e
[fix] Correct metadata function name
2021-01-13 17:26:27 -05:00
William Wernert
90f085b2d7
[fix] Fail setup early if we can't determine version of manager
2021-01-13 15:57:21 -05:00
Jason Ertel
6d6779bba6
Added automation files for network eval/standalone installs; Reduced Zeek threads from 7 to 2 on all test nodes
2021-01-13 15:43:43 -05:00
Jason Ertel
0a1ab29d19
Add distributed airgap automation files
2021-01-13 14:28:54 -05:00
Jason Ertel
ea1ab75072
Refactored so-common node type checks for improved readability; Updated so-tcpreplay to support distributed grids
2021-01-13 12:42:54 -05:00
William Wernert
6ea3a651a4
[fix] Fix unit tests for dns list
2021-01-13 11:37:48 -05:00
William Wernert
4dc3a6aa35
[refactor] Standardize list inputs to comma separated
2021-01-13 11:36:20 -05:00
Josh Patterson
59b016695f
Merge pull request #2611 from Security-Onion-Solutions/issue/2095
...
pillarize disk freespace for steno
2021-01-13 11:11:27 -05:00
m0duspwnens
df590bfd23
pillarize disk freespace for steno https://github.com/Security-Onion-Solutions/securityonion/issues/2095
2021-01-13 11:09:38 -05:00
William Wernert
d254fd960a
[feat] Add message explaining strings cannot contain spaces
2021-01-13 11:04:35 -05:00
William Wernert
0734998315
[fix] patch_schedule should not be local
2021-01-13 10:39:24 -05:00
Jason Ertel
9b060fb2d1
Adjust automation defaults for sensors and search nodes
2021-01-13 10:39:10 -05:00
Jason Ertel
bb386f9935
Allow passwordless sudo during tests for all nodes, not just manager; Only run so-test on sensor nodes during test runs
2021-01-13 10:39:05 -05:00
William Wernert
ebac17ce38
[wip] Attempting to fix missing patch schedule prompts
2021-01-13 10:29:36 -05:00
Mike Reeves
2950779d91
Fix stralka rule update
2021-01-13 09:57:12 -05:00
Josh Patterson
02d4813ef7
Merge pull request #2609 from Security-Onion-Solutions/issue/2590
...
Issue/2590
2021-01-12 16:43:45 -05:00
m0duspwnens
225ed1c14a
change suriloss and zeekloss to be more similar code style
2021-01-12 16:39:19 -05:00
m0duspwnens
96dab31ab0
Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/2590
2021-01-12 14:29:59 -05:00
Josh Patterson
aa8a14d74a
Merge pull request #2606 from Security-Onion-Solutions/automation/ssh_prompts
...
fix quotes
2021-01-12 14:08:08 -05:00
m0duspwnens
dbb9f90f00
fix quotes
2021-01-12 14:07:04 -05:00
William Wernert
dd20002fd5
[fix] Dockernet prompt is negative, continue on "no"
2021-01-12 11:28:24 -05:00
William Wernert
5c6f8f9d47
[fix] Correct function call (pt 2)
2021-01-12 11:27:03 -05:00
William Wernert
ff69d022b3
[fix] Correct function call
2021-01-12 11:26:20 -05:00
William Wernert
fb31b56c8b
[fix] Only check for network init file if iso
2021-01-12 11:22:52 -05:00
William Wernert
38e37a0385
[refactor] Remove whiptail shard count prompt
2021-01-12 11:04:40 -05:00
William Wernert
5d077d278e
[feat] Add input validation to inputbox whiptail prompts
2021-01-12 11:02:33 -05:00
William Wernert
0dc0780e28
[feat] Add unit tests for input validation
2021-01-12 11:02:00 -05:00
William Wernert
332c6877b8
[fix] Add extra arg to printf instead of using echo
2021-01-12 11:01:25 -05:00
William Wernert
ef7a934b9d
[feat] Add functions for input validation
2021-01-12 11:01:04 -05:00
Josh Patterson
4f384991ba
Merge pull request #2601 from Security-Onion-Solutions/automation/ssh_prompts
...
remote quotes
2021-01-12 09:54:10 -05:00
m0duspwnens
9405990a2e
remote quotes
2021-01-12 09:50:08 -05:00
m0duspwnens
6ea1a83afe
resolve some issues with the zeekloss script https://github.com/Security-Onion-Solutions/securityonion/issues/2590
2021-01-11 14:10:08 -05:00
Jason Ertel
8b49876e26
First pass at distribute ISO automation files
2021-01-11 12:04:57 -05:00
Jason Ertel
bc8e200919
Continued retry implementation for salt-key acceptance; improve timestamp coverage in setup
2021-01-10 02:34:46 -05:00
Jason Ertel
63047b4b85
Add retry logic around salt key acceptance during setup
2021-01-10 00:57:43 -05:00
