1392 Commits

Author	SHA1	Message	Date
Jason Ertel	a323aeb8fa	Allow so-elastic-auth to run before common even though the script has dependency on a common-provided script (benign error). This is needed first since common will need to know if auth is enabled	2021-06-16 14:23:58 -04:00
Jason Ertel	989f9dce42	Ensure sqlite.db exists before querying it; Execute so-elastic-auth after common state has been applied and redirect output to setup log	2021-06-15 16:57:13 -04:00
Jason Ertel	37f4caf536	Make new ECS changes Elastic-auth compatible	2021-06-14 12:13:50 -04:00
Jason Ertel	fca1c6e957	Merge branch 'dev' into kilo	2021-06-14 10:40:04 -04:00
Josh Patterson	c2339c84e7	Merge branch 'dev' into hotfix/soup_salt	2021-06-10 15:48:00 -04:00
Mike Reeves	a2e1b1de3a	Merge pull request #4484 from Security-Onion-Solutions/pipeline ... Pipeline	2021-06-10 13:41:14 -04:00
m0duspwnens	e64059bd7b	remove unneeded function	2021-06-10 09:31:10 -04:00
m0duspwnens	46b1de97f5	change function name	2021-06-10 09:30:03 -04:00
Jason Ertel	89a02383b8	Correct cronjob path issue for sysctl; suppress diff outputs from users/roles files; suppress salt state output during user sync	2021-06-09 16:31:32 -04:00
m0duspwnens	a82b174826	perform the repo changes for any upgrade	2021-06-09 11:53:10 -04:00
Mike Reeves	579ff8c0b4	Add verbosity to checkin	2021-06-09 11:40:17 -04:00
Jason Ertel	a0c65e2333	Ensure elastic minions also update their auth files	2021-06-09 09:38:50 -04:00
Jason Ertel	dd73ad544c	Rename PATH var to avoid collision with OS PATH var; wrapped password var in quotes to support spaces in Fleet/TheHive passwords	2021-06-09 09:06:29 -04:00
Jason Ertel	9b61723194	Merge branch 'dev' into kilo	2021-06-08 11:04:09 -04:00
Jason Ertel	d2381b0209	Ensure empty/aborted users/roles files do not get copied onto final filenames	2021-06-08 11:03:56 -04:00
Mike Reeves	4972f69dd6	Merge remote-tracking branch 'remotes/origin/dev' into pipeline	2021-06-08 11:03:14 -04:00
Jason Ertel	343c47d67a	Add so-elasticsearch-query tool	2021-06-07 17:26:07 -04:00
Jason Ertel	e53f2217ec	Add so-elasticsearch-query tool	2021-06-07 17:24:22 -04:00
William Wernert	9f2adfb67a	Merge branch 'master' into merge_2.3.52 ... # Conflicts: # VERSION	2021-06-07 14:08:17 -04:00
Jason Ertel	fdab17a3b9	Due to dir ownership restrictions need to run crossthestreams and eval as root	2021-06-06 16:36:35 -04:00
Jason Ertel	bebba7d280	Switch ownership of curl config to socore	2021-06-06 07:43:53 -04:00
Jason Ertel	ba29b5e036	Do not apply salt state if already applying a state	2021-06-04 21:56:41 -04:00
Jason Ertel	e22421ec99	Refactor users/roles management via salt due to Salt's clobbering of the inode which breaks Docker mounts	2021-06-04 20:01:30 -04:00
Jason Ertel	416b38fc71	Use cronjob to ensure user synchronization	2021-06-04 11:24:58 -04:00
Jason Ertel	316035910f	Remove inotify beacon due to it not functioning as documented; Add back so-user changes to sync upon so-user changes	2021-06-03 15:15:35 -04:00
Mike Reeves	31365b266a	Update so-zeek-stats	2021-06-03 13:53:11 -04:00
William Wernert	bb5b805983	Merge branch 'fix/missing-version-string' into foxtrot	2021-06-03 10:45:02 -04:00
Jason Ertel	fa6af06204	Avoid running highstate during setup when flipping auth flag	2021-06-02 17:13:59 -04:00
Mike Reeves	e42db3cd2d	Fix some hunt queries	2021-06-02 14:05:02 -04:00
William Wernert	b3f2c60065	Whiptail title fixes ... - Use a variable for the title - Fix cases where the whiptail title wasn't changed previously	2021-06-02 12:38:32 -04:00
William Wernert	afbf7de9e3	Remove empty lines in iso location prompt	2021-06-02 11:05:43 -04:00
Mike Reeves	77f13961ad	Merge remote-tracking branch 'remotes/origin/dev' into pipeline	2021-06-02 10:12:17 -04:00
Jason Ertel	3a134cc706	fix merge conflicts	2021-06-02 09:16:28 -04:00
Jason Ertel	7aede4d058	Persist chown/chmod settings on users/roles files	2021-06-02 09:01:16 -04:00
Mike Reeves	5983eae3a8	fix filebeat module syntax	2021-06-01 17:47:13 -04:00
Josh Patterson	9d905368ca	Merge pull request #4371 from Security-Onion-Solutions/pipeline_userpass ... Pipeline userpass	2021-06-01 17:01:51 -04:00
m0duspwnens	867613669d	changes for syncing users	2021-06-01 17:01:03 -04:00
Mike Reeves	fd1de624c8	Disable TTY for filebeat script	2021-06-01 14:50:21 -04:00
Jason Ertel	2a2247e1da	Additional so-user sync adjustments	2021-06-01 14:45:01 -04:00
Jason Ertel	7a59bee315	Add so-elastic-auth script	2021-06-01 12:48:53 -04:00
William Wernert	91c8a7c65b	Use correct syntax for tar to drop directory structure	2021-06-01 12:16:56 -04:00
William Wernert	e800d62df4	Merge branch 'dev' into fix/update-iso-soup-wording	2021-06-01 11:12:17 -04:00
m0duspwnens	7e48740ea7	fix merge conflict	2021-06-01 10:56:02 -04:00
m0duspwnens	d25a439bd4	more changes	2021-06-01 10:53:58 -04:00
Jason Ertel	ed8c85df2b	Only sync web users if teh sqlite db exists	2021-06-01 10:26:33 -04:00
Jason Ertel	47b56e78b3	Fix missing endif	2021-05-28 20:07:51 -04:00
Jason Ertel	b8a10f2e86	Support multiple elastic system users	2021-05-28 15:59:51 -04:00
m0duspwnens	edf60f80f7	manager and common states now require elasticsearch.auth state	2021-05-28 15:26:26 -04:00
m0duspwnens	0134ceef16	merge and resolve conflict in elasticsearch state	2021-05-27 11:33:44 -04:00
Jason Ertel	b43e6c5d6b	Salt will handle auto-sync	2021-05-26 13:51:24 -04:00