cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security/ossec-hids*: update to 3.5.0

Browse Source 
ChangeLogs:
        https://github.com/ossec/ossec-hids/releases/tag/3.4.0
        https://github.com/ossec/ossec-hids/releases/tag/3.5.0

PR:     242110
Submitted by:   dominik.lisiak@bemsoft.pl (maintainer)
This commit is contained in:
Fernando Apesteguía 2019-11-24 17:58:28 +00:00
parent e8d408863c
commit 64391cfc2a
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=518343
13 changed files with 57 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
security/ossec-hids-agent/Makefile
View File

@ -1,5 +1,6 @@
# $FreeBSD$
COMMENT= Security tool to monitor and check logs and intrusions - agent installation
OSSEC_TYPE= agent
MASTERDIR= ${.CURDIR}/../ossec-hids-local

16
security/ossec-hids-local-config/Makefile
View File

@ -1,19 +1,13 @@
# $FreeBSD$
PORTNAME= ossec-hids
PORTVERSION= 3.3.0
PORTREVISION= 0
CATEGORIES= security
PKGNAMESUFFIX= -${OSSEC_TYPE}-config
MAINTAINER= dominik.lisiak@bemsoft.pl
COMMENT= Configuration manager for ossec-hids
LICENSE= GPLv2
PKGNAMESUFFIX?= -${OSSEC_TYPE}-config
COMMENT?= Configuration manager for ossec-hids-${OSSEC_TYPE}
OSSEC_TYPE?= local
.include "${.CURDIR}/../ossec-hids/version.mk"
MASTERDIR?= ${.CURDIR}
DISTINFO_FILE?= ${MASTERDIR}/../ossec-hids-local/distinfo
.if ${OSSEC_TYPE} == local
CONFLICTS_INSTALL= ossec-hids-client-* \

3
security/ossec-hids-local-config/distinfo
View File

@ -1,3 +0,0 @@
TIMESTAMP = 1555773476
SHA256 (ossec-ossec-hids-3.3.0_GH0.tar.gz) = 34fac7664548ddfeea96cb0567df4eda7515cc107625eb25315a5c3522954197
SIZE (ossec-ossec-hids-3.3.0_GH0.tar.gz) = 1900070

32
security/ossec-hids-local/Makefile
View File

@ -1,21 +1,15 @@
# $FreeBSD$
PORTNAME= ossec-hids
PORTVERSION= 3.3.0
PORTREVISION= 0
CATEGORIES= security
PKGNAMESUFFIX= -${OSSEC_TYPE}
PKGNAMESUFFIX?= -${OSSEC_TYPE}
COMMENT?= Security tool to monitor and check logs and intrusions - local (standalone) installation
OSSEC_TYPE?= local
MAINTAINER= dominik.lisiak@bemsoft.pl
COMMENT= Security tool to monitor and check logs and intrusions
.include "${.CURDIR}/../ossec-hids/version.mk"
LICENSE= GPLv2
LICENSE_FILE= ${WRKSRC}/LICENSE
USES= compiler gmake ssl
OSSEC_TYPE?= local
.if ${OSSEC_TYPE} == local
CONFLICTS_INSTALL= ossec-hids-client-* \
ossec-hids-agent-* \
@ -30,7 +24,7 @@ CONFLICTS_INSTALL= ossec-hids-client-* \
ossec-hids-local-*
.endif
LIB_DEPENDS= libpcre2-8.so:devel/pcre2
LIB_DEPENDS= libpcre2-8.so:devel/pcre2 libevent.so:devel/libevent
.if ${OSSEC_TYPE} != agent
RUN_DEPENDS= expect:lang/expect
.endif
@ -41,7 +35,7 @@ ZEROMQ_LIB_DEPENDS= libczmq.so:net/czmq
INOTIFY_USES= pkgconfig
LUA_USES= readline
MYSQL_USES= mysql
MYSQL_USE= mysql
PGSQL_USES= pgsql
USE_GITHUB= yes
@ -135,7 +129,12 @@ FIREWALL_DROP_BIN= ${OSSEC_HOME}/active-response/bin/firewall-drop.sh
IPFILTER_BIN= ${OSSEC_HOME}/active-response/bin/ipfilter.sh
RESTART_OSSEC_BIN= ${OSSEC_HOME}/active-response/bin/restart-ossec.sh
SHARED_DIR= ${OSSEC_HOME}/etc/shared
INTERNAL_OPTS_CONF= ${OSSEC_HOME}/etc/local_internal_options.conf
SAMPLE_FILES= ${OSSEC_HOME}/etc/local_internal_options.conf \
${OSSEC_HOME}/active-response/bin/cloudflare-ban.sh \
${OSSEC_HOME}/active-response/bin/ossec-pagerduty.sh \
${OSSEC_HOME}/active-response/bin/ossec-slack.sh \
${OSSEC_HOME}/active-response/bin/ossec-tweeter.sh
.if empty(USER)
USER=$$(${ID} -un)
@ -187,6 +186,9 @@ INOTIFY_CFLAGS= $$(${PKG_CONFIG} --cflags libinotify)
INOTIFY_LDFLAGS=$$(${PKG_CONFIG} --libs libinotify)
OSSEC_ARGS+= TARGET=${OSSEC_TYPE} PCRE2_SYSTEM=yes INSTALL_LOCALTIME=no INSTALL_RESOLVCONF=no
.if defined(OSSEC_MAX_AGENTS)
OSSEC_ARGS+= MAXAGENTS=${OSSEC_MAX_AGENTS}
.endif
.if !defined(MAINTAINER_MODE)
OSSEC_ARGS+= INSTALL_CMD=install
.endif
@ -212,7 +214,9 @@ do-install:
@cd ${WRKSRC}/src; ${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${INSTALL_ARGS} install
post-install:
@${MV} -f ${STAGEDIR}${INTERNAL_OPTS_CONF} ${STAGEDIR}${INTERNAL_OPTS_CONF}.sample
.for file_path in ${SAMPLE_FILES}
@${MV} -f ${STAGEDIR}${file_path} ${STAGEDIR}${file_path}.sample
.endfor
@${MV} -f ${STAGEDIR}${FIREWALL_DROP_BIN} ${STAGEDIR}${IPFILTER_BIN}
@${CP} ${WRKDIR}/restart-ossec.sh ${STAGEDIR}${RESTART_OSSEC_BIN}
@${CHMOD} 550 ${STAGEDIR}${RESTART_OSSEC_BIN}

6
security/ossec-hids-local/distinfo
View File

@ -1,3 +1,3 @@
TIMESTAMP = 1555773447
SHA256 (ossec-ossec-hids-3.3.0_GH0.tar.gz) = 34fac7664548ddfeea96cb0567df4eda7515cc107625eb25315a5c3522954197
SIZE (ossec-ossec-hids-3.3.0_GH0.tar.gz) = 1900070
TIMESTAMP = 1574094213
SHA256 (ossec-ossec-hids-3.5.0_GH0.tar.gz) = 720458e7da9fb1437efab3030a3bd42ca84dc652dd1931dedce745456d40e1ad
SIZE (ossec-ossec-hids-3.5.0_GH0.tar.gz) = 1920232

4
security/ossec-hids-local/files/ossec-hids.in
View File

@ -13,7 +13,7 @@
# Default: NO
# ossec_hids_fetch_connect_time (int): Time in seconds to wait for the download of the shared configuration to start.
# Used only by agent installation.
# Default: 30
# Default: 40
# ossec_hids_fetch_read_time (int): Time in seconds to wait for subsequent download chunks of the shared configuration.
# Used only by agent installation.
# Default: 10
@ -28,7 +28,7 @@ load_rc_config $name
: ${ossec_hids_enable="NO"}
: ${ossec_hids_clear_log="NO"}
: ${ossec_hids_clear_ar_log="NO"}
: ${ossec_hids_fetch_connect_time=30}
: ${ossec_hids_fetch_connect_time=40}
: ${ossec_hids_fetch_read_time=10}
ossec_type="%%OSSEC_TYPE%%"

7
security/ossec-hids-local/pkg-plist-agent
View File

@ -1,6 +1,7 @@
@dir(,ossec,0550) %%OSSEC_HOME%%
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response/bin
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/cloudflare-ban.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/disable-account.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/firewalld-drop.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/host-deny.sh
@ -9,9 +10,9 @@
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw_mac.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/npf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/pf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/restart-ossec.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/route-null.sh

7
security/ossec-hids-local/pkg-plist-local
View File

@ -1,6 +1,7 @@
@dir(,ossec,0550) %%OSSEC_HOME%%
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response/bin
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/cloudflare-ban.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/disable-account.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/firewalld-drop.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/host-deny.sh
@ -9,9 +10,9 @@
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw_mac.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/npf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/pf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/restart-ossec.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/route-null.sh

7
security/ossec-hids-local/pkg-plist-server
View File

@ -1,6 +1,7 @@
@dir(,ossec,0550) %%OSSEC_HOME%%
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response
@dir(,ossec,0550) %%OSSEC_HOME%%/active-response/bin
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/cloudflare-ban.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/disable-account.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/firewalld-drop.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/host-deny.sh
@ -9,9 +10,9 @@
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ipfw_mac.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/npf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-pagerduty.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-slack.sh.sample
@sample(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/ossec-tweeter.sh.sample
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/pf.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/restart-ossec.sh
@(,ossec,0550) %%OSSEC_HOME%%/active-response/bin/route-null.sh

6
security/ossec-hids-local/scripts/plist.conf
View File

@ -27,4 +27,8 @@ if [ "${OSSEC_TYPE}" = "agent" ]; then
fi
sample_paths="
/etc/local_internal_options.conf.sample"
/etc/local_internal_options.conf.sample
/active-response/bin/cloudflare-ban.sh.sample
/active-response/bin/ossec-pagerduty.sh.sample
/active-response/bin/ossec-slack.sh.sample
/active-response/bin/ossec-tweeter.sh.sample"

1
security/ossec-hids-server/Makefile
View File

@ -1,5 +1,6 @@
# $FreeBSD$
COMMENT= Security tool to monitor and check logs and intrusions - server installation
OSSEC_TYPE= server
MASTERDIR= ${.CURDIR}/../ossec-hids-local

10
security/ossec-hids/Makefile
View File

@ -1,14 +1,6 @@
# $FreeBSD$
PORTNAME= ossec-hids
PORTVERSION= 3.3.0
PORTREVISION= 0
CATEGORIES= security
MAINTAINER= dominik.lisiak@bemsoft.pl
COMMENT= Security tool to monitor and check logs and intrusions
LICENSE= GPLv2
.include "${.CURDIR}/version.mk"
RUN_DEPENDS= ossec-hids-${OSSEC_TYPE}>=${PORTVERSION}:security/ossec-hids-${OSSEC_TYPE}

9
security/ossec-hids/version.mk Normal file
View File

@ -0,0 +1,9 @@
PORTNAME= ossec-hids
PORTVERSION= 3.5.0
PORTREVISION?= 0
CATEGORIES= security
MAINTAINER= dominik.lisiak@bemsoft.pl
COMMENT?= Security tool to monitor and check logs and intrusions
LICENSE= GPLv2