CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-09-20 14:49:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,751 Commits 39 Branches 130 Tags
1f1d3ded416f84c92eee34e20f99152fcd2c8a2c
Commit Graph
15 Commits
Author SHA1 Message Date
Josh Patterson 1e86be11b2 FIX: install /usr/sbin management scripts as root 
Salt installed the so-* scripts into /usr/sbin owned by unprivileged service
UIDs (939/socore, plus 930-960 per service) at mode 755, while root executes
those same files from cron, systemd and state cmd.run. Any file-write
primitive as one of those UIDs was therefore root.

Two mechanisms behind this are not visible in the diff:

file.recurse also manages the destination directory, so /usr/sbin itself was
chowned to whichever service UID ran last. A directory's owner may always
chmod it, so that UID could replace even the scripts already declared
user: root -- so-config-backup, so-suricata-eve-clean, so-nsm-mount-nvme.
usr_sbin_perms now pins the directory to root:root 555, the mode the
filesystem RPM ships.

Omitting user:/group: is a no-op on files that already exist, because
check_perms only chowns when a user is named. Explicit user: root is what
lets upgraded grids self-heal on the next highstate, and what makes a
revert chown back rather than silently do nothing.
 2026-09-16 10:34:20 -04:00
reyesj2 f6a2758321 add so-elastic-agent-install script to minions 2026-07-09 14:44:42 -05:00
reyesj2 57b7d59387 verify elastic-agent reports healthy status before completing installation 2026-07-07 16:42:47 -05:00
Jorge Reyes e89c820b65 Revert "use -verify flag during grid agent install to ensure agent health" 2026-05-16 09:59:14 -05:00
reyesj2 d2524a593f use -verify flag during grid agent install to ensure agent health 2026-05-14 17:12:02 -05:00
reyesj2 ba68e3c9bd more better 2026-01-20 15:30:19 -06:00
reyesj2 a8e218a9ff reinstall agent on grid nodes when service wasn't cleanly removed. eg. manually deleting /opt/Elastic/Agent/ 2026-01-20 12:37:06 -06:00
Josh Patterson ccb8ffd6eb Update install_agent_grid.sls 2025-11-03 17:05:48 -05:00
reyesj2 5a8ea57a1b move off of cmd.script with args \ 
https://github.com/saltstack/salt/issues/68298
 2025-11-03 15:31:14 -06:00
Josh Brower fb8a79e112 Retry install 2023-07-13 13:15:01 -04:00
Josh Brower bb0cfc5253 Create & assign Heavy Node Fleet Policy 2023-06-23 15:49:03 -04:00
Josh Brower a9585b2a7f Fix Elastic Agent for Heavy 2023-06-23 10:45:58 -04:00
Josh Brower 923de356e1 Fix typos 2023-05-16 08:06:31 -04:00
Doug Burks 53ed4d49c2 Update install_agent_grid.sls 2023-05-15 10:10:27 -04:00
Mike Reeves 4944365341 Change the salt dir for elastic fleet 2023-03-17 11:02:02 -04:00