m0duspwnens
b693373d8d
change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679
2021-01-20 15:09:53 -05:00
m0duspwnens
b1c5b83fd5
removing old search node logic and managersensor from salt top
2021-01-20 09:53:42 -05:00
m0duspwnens
caaa8cc764
add schedule state to fleet node so it gets highstate schedule
2021-01-20 09:46:49 -05:00
William Wernert
8023e79020
[fix] Don't remove answer file when checking version on manager, file does not yet exist
2021-01-19 11:28:33 -05:00
William Wernert
650008e1e6
[fix] Replace leftover /root/install_opt strings with variable
2021-01-19 11:20:53 -05:00
Jason Ertel
d91913e58e
Redirect tcpreplay warnings to dev null when running so-test
2021-01-18 21:42:50 -05:00
Mike Reeves
12aa4033b6
Fix soup in case airgap is in the hostname
2021-01-18 18:08:34 -05:00
Jason Ertel
a795f0a487
Correct airgap IPs; Remove auto tcpreplay during post-setup phase
2021-01-16 12:01:49 -05:00
Jason Ertel
2006677a22
Add default customization file (Blank)
2021-01-15 20:08:27 -05:00
William Wernert
32839f8a53
[feat] Various input validation changes + fixes
...
* Keep invalid input in subsequent prompts
* Remove useless placeholder values
* Only set PROCS variable once
* Make input collection loops more consistent
2021-01-15 18:05:29 -05:00
Jason Ertel
0af6afa216
Add method for making adjustments to the SOC UI
2021-01-15 16:26:06 -05:00
William Wernert
8cb836a17a
[fix] Don't preset HOSTNAME var, interferes with automation
2021-01-15 16:22:07 -05:00
William Wernert
432d231a0e
[fix] Don't use set -e since we depend on non-zero exit codes for this function
2021-01-15 13:52:10 -05:00
William Wernert
9726ff9ce6
[fix] Correct logic for verbose flag
2021-01-15 13:39:12 -05:00
Mike Reeves
9cf63545bc
Merge pull request #2640 from Masaya-A/influxdb/strengthen
...
Disable weak cipher suites from influxdb
2021-01-15 10:50:21 -05:00
William Wernert
e440f6c44a
[fix] Set variables used by sensor pillar before generating the pillar
2021-01-15 10:29:51 -05:00
William Wernert
ed129bcf1f
[fix] Add verbose flag so that so-monitor-add only sees necessary information
2021-01-15 09:25:04 -05:00
William Wernert
f4de5e28bf
[fix] Padding 3->4 spaces, don't use lookup_pillar before salt is installed
2021-01-15 08:57:14 -05:00
Jason Ertel
07b5f1d23e
Rename functions to avoid naming conflict with setup vars
2021-01-15 08:55:30 -05:00
William Wernert
0f6805823e
[fix] Add spacing to whiptail menu + preset err
2021-01-15 08:35:37 -05:00
Masaya-A
0d93b15a63
Disable weak cipher suites from influxdb
...
The default config of influxdb enables use of some weak cipher suites such as RC4 and 3DES(SWEET32).
To disable them, a list of enabled ciphers added into influxdb.conf.
2021-01-15 11:47:04 +09:00
William Wernert
dbe22f901d
[fix] Add jinja raw block to so-common
2021-01-14 14:54:37 -05:00
William Wernert
ebc5a4314a
[feat] Add salt logs to log rotation config
2021-01-14 13:43:00 -05:00
William Wernert
df07cc578c
[fix] Only update err if return code is non-zero
2021-01-14 13:20:56 -05:00
William Wernert
2e23e0d690
[fix] Only update err if return code is non-zero
2021-01-14 13:20:29 -05:00
William Wernert
a7b9b565fd
[fix] Only return after all interfaces added to bond0
2021-01-14 13:19:29 -05:00
William Wernert
e7070ef217
Merge pull request #2630 from Security-Onion-Solutions/feature/setup
...
Input validation + so-monitor-add
2021-01-14 13:17:01 -05:00
William Wernert
8793965f4a
[fix] Capitalization
2021-01-14 13:12:12 -05:00
William Wernert
ddcd487edc
[fix] Remove files not in dev
2021-01-14 13:08:11 -05:00
William Wernert
0db439df1e
Merge branch 'dev' into feature/setup
2021-01-14 13:06:32 -05:00
William Wernert
82c7832d60
[fix] Fix indent in valid_hostname
2021-01-14 12:58:21 -05:00
William Wernert
3c22738ae1
[fix] Add example CIDR notation, remove placeholder X.X.X.X
2021-01-14 10:38:47 -05:00
Jason Ertel
9d0dca05b1
Adjusted logic on so-tcpreplay to handle init for standalone/eval nodes
2021-01-13 22:29:58 -05:00
Jason Ertel
2ccf77eaef
Rename network automation files
2021-01-13 17:29:48 -05:00
William Wernert
8245b25835
[fix] Move metadata function
2021-01-13 17:28:19 -05:00
William Wernert
b68685e00e
[fix] Correct metadata function name
2021-01-13 17:26:27 -05:00
William Wernert
90f085b2d7
[fix] Fail setup early if we can't determine version of manager
2021-01-13 15:57:21 -05:00
Jason Ertel
6d6779bba6
Added automation files for network eval/standalone installs; Reduced Zeek threads from 7 to 2 on all test nodes
2021-01-13 15:43:43 -05:00
Jason Ertel
0a1ab29d19
Add distributed airgap automation files
2021-01-13 14:28:54 -05:00
Jason Ertel
ea1ab75072
Refactored so-common node type checks for improved readability; Updated so-tcpreplay to support distributed grids
2021-01-13 12:42:54 -05:00
William Wernert
6ea3a651a4
[fix] Fix unit tests for dns list
2021-01-13 11:37:48 -05:00
William Wernert
4dc3a6aa35
[refactor] Standardize list inputs to comma separated
2021-01-13 11:36:20 -05:00
Josh Patterson
59b016695f
Merge pull request #2611 from Security-Onion-Solutions/issue/2095
...
pillarize disk freespace for steno
2021-01-13 11:11:27 -05:00
m0duspwnens
df590bfd23
pillarize disk freespace for steno https://github.com/Security-Onion-Solutions/securityonion/issues/2095
2021-01-13 11:09:38 -05:00
William Wernert
d254fd960a
[feat] Add message explaining strings cannot contain spaces
2021-01-13 11:04:35 -05:00
William Wernert
0734998315
[fix] patch_schedule should not be local
2021-01-13 10:39:24 -05:00
Jason Ertel
9b060fb2d1
Adjust automation defaults for sensors and search nodes
2021-01-13 10:39:10 -05:00
Jason Ertel
bb386f9935
Allow passwordless sudo during tests for all nodes, not just manager; Only run so-test on sensor nodes during test runs
2021-01-13 10:39:05 -05:00
William Wernert
ebac17ce38
[wip] Attempting to fix missing patch schedule prompts
2021-01-13 10:29:36 -05:00
Mike Reeves
2950779d91
Fix stralka rule update
2021-01-13 09:57:12 -05:00
