From dfe707ab644aabdf65c59497ac6077f9cab7c1d5 Mon Sep 17 00:00:00 2001 From: m0duspwnens Date: Tue, 24 Oct 2023 17:26:39 -0400 Subject: [PATCH] fix issue/11610 --- salt/pcap/config.sls | 2 +- salt/suricata/config.sls | 2 +- salt/zeek/config.sls | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/salt/pcap/config.sls b/salt/pcap/config.sls index 26236e2ffe..9ea5cee658 100644 --- a/salt/pcap/config.sls +++ b/salt/pcap/config.sls @@ -41,7 +41,7 @@ pcap_sbin: - file_mode: 755 {% if PCAPBPF %} - {% set BPF_CALC = salt['cmd.script']('/usr/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + PCAPBPF|join(" "),cwd='/root') %} + {% set BPF_CALC = salt['cmd.script']('salt://common/tools/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + PCAPBPF|join(" "),cwd='/root') %} {% if BPF_CALC['stderr'] == "" %} {% set BPF_COMPILED = ",\\\"--filter=" + BPF_CALC['stdout'] + "\\\"" %} {% else %} diff --git a/salt/suricata/config.sls b/salt/suricata/config.sls index 9da40660ee..8d5279349a 100644 --- a/salt/suricata/config.sls +++ b/salt/suricata/config.sls @@ -129,7 +129,7 @@ surithresholding: # BPF compilation and configuration {% if SURICATABPF %} - {% set BPF_CALC = salt['cmd.script']('/usr/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + SURICATABPF|join(" "),cwd='/root') %} + {% set BPF_CALC = salt['cmd.script']('salt://common/tools/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + SURICATABPF|join(" "),cwd='/root') %} {% if BPF_CALC['stderr'] == "" %} {% set BPF_STATUS = 1 %} {% else %} diff --git a/salt/zeek/config.sls b/salt/zeek/config.sls index 703da8d858..7fdbd85605 100644 --- a/salt/zeek/config.sls +++ b/salt/zeek/config.sls @@ -152,7 +152,7 @@ plcronscript: # BPF compilation and configuration {% if ZEEKBPF %} - {% set BPF_CALC = salt['cmd.script']('/usr/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + ZEEKBPF|join(" "),cwd='/root') %} + {% set BPF_CALC = salt['cmd.script']('salt://common/tools/sbin/so-bpf-compile', GLOBALS.sensor.interface + ' ' + ZEEKBPF|join(" "),cwd='/root') %} {% if BPF_CALC['stderr'] == "" %} {% set BPF_STATUS = 1 %} {% else %}