security/ossec-hids*: local_rules.xml replaced with sample file PR: 266176 Reported by: dominik.lisiak@bemsoft.pl (maintainer)68d6aa009c
Port details
security/ossec-hids-agent 3.8.0
Security tool to monitor and check logs and intrusions - agent installation
Port info
- Maintainer
- dominik.lisiak@bemsoft.pl
- Packages
- latest: 3.8.0
- Upstream
- up to date
- Last update
- to 3.8.0 via security/ossec-hids-local · 822ec4a435
- Quarterly
- 2026Q4: 3.8.0
- Formerly
- security/ossec-hids-client until 2018-11-09
- WWW
- https://ossec.github.io
- Links
- cgit · VuXML
Install
- Package
# pkg install ossec-hids-agentinstalls 3.8.0 fromlatest; fromquarterly(2026Q4) 3.8.0- Port
# cd /usr/ports/security/ossec-hids-agent && make install clean# make -C /usr/ports/security/ossec-hids-agent config # change options first
- Size
- 292 KiB download · 2.0 MiB installed
- Depends on
- devel/libevent 2.1.13, devel/libinotify 20240724_3, devel/pcre2 10.49
- License
- GPLv2
- Creates
- user
ossec,ossecm,ossecr, groupossec - Options
- 2 of 3 on in the package: DOCS INOTIFY
Show the 1 options that are off
LUA - pkg-message
Shown after installing
All the files related to OSSEC have been installed in: /usr/local/ossec-hids You need to create main configuration file: /usr/local/ossec-hids/etc/ossec.conf For information on proper configuration see: https://www.ossec.net/docs/syntax/ossec_config.html To enable the startup script add ossec_hids_enable="YES" to /etc/rc.conf. If you intend to use "firewall-drop" active response on this OSSEC instance create the script: /usr/local/ossec-hids/active-response/bin/firewall-drop.sh You can copy or hard link (symbolic link is not supported) one of the scripts already provided by OSSEC: /usr/local/ossec-hids/active-response/bin/ipfilter.sh /usr/local/ossec-hids/active-response/bin/ipfw.sh /usr/local/ossec-hids/active-response/bin/pf.sh For further steps see the documentation: https://www.ossec.net/docs/syntax/head_ossec_config.active-response.html Consider installing "security/ossec-hids-agent-config" to ease OSSEC configuration. For additional help execute: # /usr/local/etc/rc.d/ossec-hids help
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.8.0 | ✗ | – |
| FreeBSD 15 | 3.8.0 | ✗ | – |
| FreeBSD 14 | 3.8.0 | ✗ | 3.8.0 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.8.0 | ✗ | – |
| FreeBSD 14 | 3.8.0 | ✗ | 3.8.0 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 3.8.0.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (23)
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
security/ossec-hids*: update to 3.5.0
ChangeLogs:
https://github.com/ossec/ossec-hids/releases/tag/3.4.0
https://github.com/ossec/ossec-hids/releases/tag/3.5.0
PR: 242110
Submitted by: dominik.lisiak@bemsoft.pl (maintainer)64391cfc2asecurity/ossec-hids-server: update from 2.8.3 to 3.1.0 PR: 232794 Submitted by: Dominik Lisiak <dominik.lisiak@bemsoft.pl> (maintainer)868061ef79
Don't try to look for PLIST under .OBJDIR
If MAKEOBJDIRPREFIX and WRKDIRPREFIX are same PLIST may point to a
non-existing file under .OBJDIR without breaking build.
$ export MAKEOBJDIRPREFIX=/tmp
$ echo WRKDIRPREFIX=/tmp >>${__MAKE_CONF-/etc/make.conf}
$ cd /usr/ports/print/harfbuzz-icu
$ make clean patch
$ make -V .OBJDIR
/tmp/usr/ports/print/harfbuzz-icu
$ make install
$ pkg info -l harfbuzz-icu
harfbuzz-icu-1.5.1_2:
PR: 219008
Submitted by: Ilia Skalozubov (based on)
Approved by: portmgr blankete4b4177bbcMark as broken on various tier-2 archs. While here, pet portlint. Approved by: portmgr (tier-2 blanket)c92cf8332c
Update security/ossec-hids-* to 2.8.2. Approved by: swills (mentor) MFH: 2015Q2 Security: c470db07-1098-11e5-b6a8-002590263bf57f16b2fac1
Add missing USE_OPENSSL=yes PR: 195796c88aaf5c89
- Update to 2.8 - Fix permissions preventing server and local from starting correctly Reviewed by: swills@4cbf9a39b2
- Fix the permissions so ossec-hids-client will actually start. 1: Based on a submission by Johan PR: 190709 [1] Submitted by: Johan Strom <johan@stromnet.se> [1] Reviewed by: swills@bd445ab0c7
- Update ossec to 2.7.1 - Stagify - Fix build with clang Reviewed by: zi@9da100720e
Add NO_STAGE all over the place in preparation for the staging support (cat: security)a65ed2e51b
- Updated to 2.7 (ChangeLog: http://www.ossec.net/?p=577) - Trimmed Makefile headers - Removed patches incorporated into upstream - Added conditional patch for compilation on 7.x, early 8.x systems - Fixed QAT-reported plist problems - Added new users and group for use with daemons Requested by: various users (via private email)9d5e4df451
- Update to 2.6 PR: ports/159786 Submitted by: Jake Smith <jake@avenue22.net> Approved by: maintainer(timeout, > 40 days)ff9f11b489
- Fix the build Reported by: QAT@ Approved by: maintainer(implicity)f075fdf672
Chase update to 2.4.1 PR: ports/148057 Submitted by: Marco Re <laza_bsd@laza.it> Approved by: valerio.daelli@gmail.com (maintainer timeout)8a5c895443
- Update to 2.0 PR: 132867 Submitted by: valerio dot daelli at ifom-ieo-campus dot it (maintainer)e7050498e2
- Fix plist Approved by: maintainer4d20135ba7
- Update to 1.4 PR: ports/117762 Submitted by: valerio.daelli at gmail.com (maintainer)4e8eda4541
Add missing files from pkg-plist after upgrade to masterport Noticed by: YAPHR PR: ports/115868 (indirect)ca45b5f7cc
- Add pkg-plist.client - Bump PORTREVISION PR: 113260 Submitted by: Paul Schmehl <pauls@utdallas.edu> Approved by: maintainer7c1fcbbf13
- Add ossec-hids-client as slave port. PR: ports/111944 Submitted by: Valerio Daelli <valerio.daelli at gmail.com>1fa26157d1