William Wernert
e6adb46364
Run so-preflight during setup
2021-11-02 11:18:23 -04:00
William Wernert
9a9d1480de
Manage docker group's gid to prevent gid overlap
2021-11-02 10:41:36 -04:00
William Wernert
c17187708e
Merge branch 'dev' into foxtrot
2021-11-01 12:46:43 -04:00
Mike Reeves
095e6bd48c
Merge pull request #6044 from Burak-PLT/patch-1
...
Update auth.sls
2021-11-01 10:22:16 -04:00
William Wernert
f76a52b2ee
Fix NIC string values for VLAN tagged interfaces
2021-10-29 13:34:23 -04:00
William Wernert
b555ad16da
Merge pull request #6052 from Security-Onion-Solutions/foxtrot
...
Foxtrot
2021-10-29 10:52:51 -04:00
William Wernert
b1c67f696e
Re-order logic to maintain backwards compatibility
2021-10-29 10:47:05 -04:00
William Wernert
d08149f728
Don't set INTERWEBS variable on automated minions
2021-10-29 10:11:47 -04:00
William Wernert
a5cba5ecf8
Merge branch 'dev' into foxtrot
2021-10-29 10:01:46 -04:00
Burak-PLT
f081938be5
Update auth.sls
...
Change default password lengths to 72 characters from 20.
2021-10-28 16:00:58 -04:00
William Wernert
c2b18efdbb
Minions still need to be ISO installs to be airgap
2021-10-28 11:59:42 -04:00
William Wernert
6b480a5ba4
Change airgap check to something that doesn't require root
2021-10-28 11:51:50 -04:00
William Wernert
d6eeb0b735
Gen ssh key sooner
2021-10-28 10:04:03 -04:00
Josh Patterson
3000c57428
Merge pull request #6039 from Security-Onion-Solutions/issue/5759
...
Issue/5759
2021-10-28 09:24:44 -04:00
m0duspwnens
5c5b4004e9
Merge remote-tracking branch 'remotes/origin/dev' into issue/5759
2021-10-28 08:52:04 -04:00
Josh Patterson
05e0f92ec5
Merge pull request #6036 from Security-Onion-Solutions/issue/5955
...
include ssl state in telegraf state
2021-10-28 08:50:57 -04:00
m0duspwnens
0cea5e8f22
include ssl state in telegraf state
2021-10-28 08:46:27 -04:00
m0duspwnens
7eb42fa6bd
change boolean
2021-10-28 08:43:03 -04:00
m0duspwnens
18ce9c7819
disable zeekpacketlosscron and telegraf checks if zeek is diabled via pillar
2021-10-28 07:46:02 -04:00
Mike Reeves
b3e5319806
Merge pull request #6028 from Security-Onion-Solutions/telecluster
...
Enable cluster stats
2021-10-27 16:37:42 -04:00
Mike Reeves
c8c8cf203f
Enable cluster stats
2021-10-27 15:44:52 -04:00
Josh Patterson
19056b9177
Merge pull request #6027 from Security-Onion-Solutions/issue/5955
...
Issue/5955
2021-10-27 15:07:22 -04:00
William Wernert
75490a2536
Fix typo
2021-10-27 14:59:24 -04:00
William Wernert
eee612e73d
Make folder/file states explicit
...
Rather than using /nsm/zeek (max_depth: 1) create explicit states for /nsm/zeek/spool and /nsm/zeek/spool/state.db that set correct ownership
2021-10-27 11:43:09 -04:00
William Wernert
9e9079f9cb
Reorder airgap prompt and add additional logic
...
Setup should now only ask the user whether to setup as airgap on manager-type installs. For all distributed minions setup will now inherit the airgap boolean from the manager.
2021-10-27 11:03:00 -04:00
William Wernert
331801eec2
Merge branch 'dev' into foxtrot
2021-10-27 10:58:16 -04:00
William Wernert
a0216cea57
Merge pull request #6021 from Security-Onion-Solutions/fix/update-mysql-root-user
...
Update ip for root user in mysql when running so-ip-update
2021-10-27 10:55:11 -04:00
m0duspwnens
e7f43cff5e
limit nodes that bind filebeat certs in so-logstash
2021-10-27 10:45:10 -04:00
William Wernert
90d473f2d6
Update ip for root user in mysql when running so-ip-update
2021-10-27 10:42:33 -04:00
m0duspwnens
bf403a8307
only manager nodes get cert, key and att&ck binds
2021-10-27 09:47:12 -04:00
m0duspwnens
58d62f29ea
include ssl state in registry state
2021-10-26 11:55:47 -04:00
Mike Reeves
bcf03773c0
Merge pull request #6009 from Security-Onion-Solutions/stenoports
...
Remove port bindings for steno
2021-10-26 10:58:11 -04:00
m0duspwnens
c0dd9efd9b
change so-thehive-es binds and requires
2021-10-26 10:50:16 -04:00
m0duspwnens
36ae07b78e
change timeout from 60 to 120
2021-10-26 10:49:50 -04:00
Mike Reeves
d77328608e
Remove port bindings for steno
...
Steno runs in host mode so port bindings are not required
2021-10-26 10:23:33 -04:00
m0duspwnens
682cbfd223
remove the mode
2021-10-26 09:23:24 -04:00
m0duspwnens
fa2edb2b59
make cortex_init and hive_init time out after 1 minutes vs 5 minutes
2021-10-26 08:39:30 -04:00
m0duspwnens
0c679b62b2
Merge remote-tracking branch 'remotes/origin/dev' into issue/5955
2021-10-25 16:29:41 -04:00
m0duspwnens
7e8d74e770
just use mode
2021-10-25 15:50:27 -04:00
m0duspwnens
9a78d13bee
change perms on mysql
2021-10-25 15:37:23 -04:00
Jason Ertel
c469d12a49
Merge pull request #6002 from Security-Onion-Solutions/kilo
...
Update whiptail links to use latest docs
2021-10-25 15:08:31 -04:00
Jason Ertel
d5f42e0d7c
Update whiptail links to use latest docs
2021-10-25 15:06:42 -04:00
weslambert
926551d398
Merge pull request #5998 from Security-Onion-Solutions/fix/hl_host_name
...
Rename HTTP client headers and host
2021-10-25 13:21:11 -04:00
weslambert
3be0d05eea
Update field removal based on HTTP input changes
2021-10-25 13:16:30 -04:00
weslambert
7fa43a276a
Rename default headers and host for HTTP input
2021-10-25 13:15:20 -04:00
William Wernert
2bfedbd581
Merge pull request #5996 from Security-Onion-Solutions/fix/escape-node-desc
...
Escape single quotes and allow for any character in node description
2021-10-25 10:53:36 -04:00
William Wernert
dca30146ab
Merge branch 'dev' into foxtrot
2021-10-25 10:50:25 -04:00
William Wernert
6e34905b42
Escape single quotes and allow for any character in node description
2021-10-25 10:48:09 -04:00
m0duspwnens
ee7e714f43
change to file_mode
2021-10-22 16:55:23 -04:00
m0duspwnens
d7e5377a44
more requires
2021-10-22 16:46:45 -04:00
