security/ossec-hids*: local_rules.xml replaced with sample file

PR:		266176
Reported by:	dominik.lisiak@bemsoft.pl (maintainer)
This commit is contained in:
Dominik Lisiak 2022-10-27 09:56:38 +02:00 committed by Fernando Apesteguía
parent 49f731f097
commit 68d6aa009c
5 changed files with 12 additions and 2 deletions

View File

@ -1,3 +1,4 @@
PORTREVISION= 0
COMMENT= Security tool to monitor and check logs and intrusions - agent installation
OSSEC_TYPE= agent

View File

@ -1,3 +1,4 @@
PORTREVISION?= 1
PKGNAMESUFFIX?= -${OSSEC_TYPE}
COMMENT?= Security tool to monitor and check logs and intrusions - local (standalone) installation
WWW= https://ossec.github.io
@ -139,6 +140,10 @@ SAMPLE_FILES= ${OSSEC_HOME}/etc/local_internal_options.conf \
${OSSEC_HOME}/active-response/bin/ossec-slack.sh \
${OSSEC_HOME}/active-response/bin/ossec-tweeter.sh
.if ${OSSEC_TYPE} != agent
SAMPLE_FILES+= ${OSSEC_HOME}/rules/local_rules.xml
.endif
.if empty(USER)
USER=$$(${ID} -un)
.endif

View File

@ -119,7 +119,7 @@
@(,ossec,0640) %%OSSEC_HOME%%/rules/last_rootlogin_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/lighttpd_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/linux_usbdetect_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/local_rules.xml
@sample(,ossec,0640) %%OSSEC_HOME%%/rules/local_rules.xml.sample
@(,ossec,0640) %%OSSEC_HOME%%/rules/mailscanner_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/mcafee_av_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/mhn_cowrie_rules.xml

View File

@ -119,7 +119,7 @@
@(,ossec,0640) %%OSSEC_HOME%%/rules/last_rootlogin_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/lighttpd_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/linux_usbdetect_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/local_rules.xml
@sample(,ossec,0640) %%OSSEC_HOME%%/rules/local_rules.xml.sample
@(,ossec,0640) %%OSSEC_HOME%%/rules/mailscanner_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/mcafee_av_rules.xml
@(,ossec,0640) %%OSSEC_HOME%%/rules/mhn_cowrie_rules.xml

View File

@ -33,3 +33,7 @@ sample_paths="
/active-response/bin/ossec-pagerduty.sh.sample
/active-response/bin/ossec-slack.sh.sample
/active-response/bin/ossec-tweeter.sh.sample"
if [ "${OSSEC_TYPE}" != "agent" ]; then
sample_paths="${sample_paths}
/rules/local_rules.xml.sample"
fi