-
Notifications
You must be signed in to change notification settings - Fork 9
Release Notes
This is our first release of Onion Salt that has some very basic features.
User Management
You can use salt to manage your users across all minions. This comes in handy when you have to deploy analyst accounts across multiple sensors. See [ManagingUsers] for more details.
Automated Security Onion Package Installation
Once you specify what minions are servers or what minion is your backend Onionsalt will automatically install all the required packages for each type. If you want both on a sensor just classify it as a backend. More details about the package functionality can be found on [PackageManagement]
Rule Change Monitoring
Onionsalt will monitor for changes to your rules and restart snort/surricata. Currently it does a service nsm-server restart which is not ideal so we will continue to add logic here to only start things like pcap when the bpf.conf changes etc. Check [RuleUpdate] for how it works. Also bro rules also sync automatically. There is no need though to restart it because Bro is smart enough to notice and reload the configs.