Merge pull request #11288 from Security-Onion-Solutions/issue/11229

Issue/11229
Security-Onion-Solutions · Sep 11, 2023 · 9968d69 · 9968d69
2 parents 55847c7 + 02c54a2
commit 9968d69
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 39 deletions.
diff --git a/salt/idstools/enabled.sls b/salt/idstools/enabled.sls
@@ -77,6 +77,7 @@ run_so-rule-update:
       - docker_container: so-idstools
     - onchanges:
       - file: idstoolsetcsync
+      - file: synclocalnidsrules
     - order: last
 
 {% else %}

diff --git a/salt/idstools/etc/rulecat.conf b/salt/idstools/etc/rulecat.conf
@@ -3,8 +3,8 @@
 --merged=/opt/so/rules/nids/all.rules
 --local=/opt/so/rules/nids/local.rules
 {%-   if GLOBALS.md_engine == "SURICATA" %}
---local=/opt/so/rules/nids/sorules/extraction.rules
---local=/opt/so/rules/nids/sorules/filters.rules
+--local=/opt/so/rules/nids/extraction.rules
+--local=/opt/so/rules/nids/filters.rules
 {%-   endif %}
 --url=http://{{ GLOBALS.manager }}:7788/suricata/emerging-all.rules
 --disable=/opt/so/idstools/etc/disable.conf

diff --git a/salt/idstools/sorules/extraction.rules b/salt/idstools/sorules/extraction.rules
diff --git a/salt/idstools/sorules/filters.rules b/salt/idstools/sorules/filters.rules