One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
security/ossec-hids-* -- root escalation via syscheck featureentered 2015-06-12
Security tool to monitor and check logs and intrusions - server installation
# pkg install ossec-hids-serverinstalls 3.8.0 from latest; from quarterly (2026Q4) 3.8.0# cd /usr/ports/security/ossec-hids-server && make install clean# make -C /usr/ports/security/ossec-hids-server config # change options first
ossec, ossecm, ossecr, group ossecAll the files related to OSSEC have been installed in: /usr/local/ossec-hids You need to create main configuration file: /usr/local/ossec-hids/etc/ossec.conf For information on proper configuration see: https://www.ossec.net/docs/syntax/ossec_config.html To enable the startup script add ossec_hids_enable="YES" to /etc/rc.conf. If you intend to use "firewall-drop" active response on this OSSEC instance create the script: /usr/local/ossec-hids/active-response/bin/firewall-drop.sh You can copy or hard link (symbolic link is not supported) one of the scripts already provided by OSSEC: /usr/local/ossec-hids/active-response/bin/ipfilter.sh /usr/local/ossec-hids/active-response/bin/ipfw.sh /usr/local/ossec-hids/active-response/bin/pf.sh For further steps see the documentation: https://www.ossec.net/docs/syntax/head_ossec_config.active-response.html Consider installing "security/ossec-hids-server-config" to ease OSSEC configuration. For additional help execute: # /usr/local/etc/rc.d/ossec-hids help
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.8.0 | ✗ | – |
| FreeBSD 15 | 3.8.0 | ✗ | – |
| FreeBSD 14 | 3.8.0 | ✗ | 3.8.0 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.8.0 | ✗ | – |
| FreeBSD 14 | 3.8.0 | ✗ | 3.8.0 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 3.8.0.One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
security/ossec-hids*: update to 3.5.0
ChangeLogs:
https://github.com/ossec/ossec-hids/releases/tag/3.4.0
https://github.com/ossec/ossec-hids/releases/tag/3.5.0
PR: 242110
Submitted by: dominik.lisiak@bemsoft.pl (maintainer)64391cfc2asecurity/ossec-hids-server: update from 2.8.3 to 3.1.0 PR: 232794 Submitted by: Dominik Lisiak <dominik.lisiak@bemsoft.pl> (maintainer)868061ef79
Fix database support in ossec-hids-local and pass maintainer to submitter PR: 221269 Submitted by: Dominik Lisiak <dominik.lisiak@bemsoft.pl>9dc2cd8008
Update devel/readline to 7.0 patch 3 - Bump PORTREVISION for shlib change Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html Differential Revision: https://reviews.freebsd.org/D11172 PR: 219947 Exp-run by: antoinecb037d3c98
security/security/ossec-hids-(server|local|client): SSL fix / stage QA
Fix 1: Set LDFLAGS for SSL support
Fix 2: Fix stage-QA failures in both -local and -server:
Two log files were present in these stage directories that were
not listed in the plist. One of them were registered by the
-client port so rather than remove them from the stage, add them
to the package list
Fix 3: revbump after fix 2
Approved by: SSL and general blankets6a739f4a97Mark as broken on various tier-2 archs. While here, pet portlint. Approved by: portmgr (tier-2 blanket)c92cf8332c
* Modernize OPTIONS handling somewhat: this fixes compilation when either the MYSQL or PGSQL options are enabled
* Add OPTION-dependent targets to install the postgresql or mysql DB
schemas as portdocs when either of those two options are enabled.
* Add a patch for the DB schemas to allow for longer entries in the
system.information column (submitted upstream and committed as
https://github.com/ossec/ossec-hids/commit/7a4b0d32e2b67bbef5d68dd7aeeee4e70b9c1982
* Add a 'reload' command to the ossec-hids RC script
* Update to version 2.8.3
* Generally update patch files via 'make makepatch'
* Change expect scripts used by agentlessd to group ossec so they are
executable by the ossec user.
* Use shebangfix to set an explicit path to where expect is installed,
since it isn't on the default path inherited from the system init
scripts, so /usr/bin/env doesn't find the command interpreter.
* Change CONFLICTS to CONFLICTS_INSTALL between each of the the
ossec-hids-{client,local,server} ports.
DB changes compile tested with postgresql and mysql, but only
thoroughly run-time tested with postgresql.
PR: 208935
Submitted by: matthew
Approved by: brd (maintainer)14bb261c94Fix build as a user. While there, merge do-install and post-install, and use an option target helper. Sponsored by: Absolight970c34a2dc
Update security/ossec-hids-* to 2.8.2. Approved by: swills (mentor) MFH: 2015Q2 Security: c470db07-1098-11e5-b6a8-002590263bf57f16b2fac1
- Don't cat pkg-message from Makefiles Approved by: portmgr blanket68a5cc350c
Remove OSVERSION checks that do not make sense any more.
For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).
Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.
Differential Revision: https://reviews.freebsd.org/D22090438143249Add missing USE_OPENSSL=yes PR: 195796c88aaf5c89
Finally retire USE_PGSQL4cb60faedd
Update to 2.8.1 which addresses CVE-2014-5284. Reviewed by: zi@ Security: 36858e78-3963-11e4-ad84-000c29f6ae423ba38fc97b
Fix build on -current.758b4b1d1b
Add USES=readline to fix build on -current.2ac8e45b30
- Update to 2.8 - Fix permissions preventing server and local from starting correctly Reviewed by: swills@4cbf9a39b2
- Fix the permissions so ossec-hids-client will actually start. 1: Based on a submission by Johan PR: 190709 [1] Submitted by: Johan Strom <johan@stromnet.se> [1] Reviewed by: swills@bd445ab0c7
- Add a patch I missed that fixes the build of ossec-hids-client. Reviewed by: zi@ Noticed by: swills@ / jenkins Pointy hat to: me8ae8a4f090
- Update COMMENT60e4627abf
- Update MAINTAINER771c493803
- Update ossec to 2.7.1 - Stagify - Fix build with clang Reviewed by: zi@9da100720e
[Errno 11] Resource Temporarily Unavailable Reassigning my ports back to the pool with the hope of freeing up to do more FreeBSD work in the future. Submitted by: glarkin43b0eb0cb0
Add NO_STAGE all over the place in preparation for the staging support (cat: security)a65ed2e51b
- Updated to 2.7 (ChangeLog: http://www.ossec.net/?p=577) - Trimmed Makefile headers - Removed patches incorporated into upstream - Added conditional patch for compilation on 7.x, early 8.x systems - Fixed QAT-reported plist problems - Added new users and group for use with daemons Requested by: various users (via private email)9d5e4df451
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.83eb2c3700- Applied the startup script patch from PR ports/161524 to the local installation type [1] - Streamlined the rc.d file to use fewer functions - Added a precmd to the rc.d file to ensure the proper ownership on some queue files. OSSEC daemons don't properly chown them upon creation. - Bumped PORTREVISION Reported by: Albert Gabas <agabas@astabis.com> (via email) [1] Feature safe: yes8f7496f7d8
- Fixed broken path in startup control script [1] - Fixed a link in pkg-message to point to a more up-to-date doc page [1] - Removed unnecessary WITH_BDB knob [1] - Reformatted pkg-message - Regenerated/renamed patch files with makepatch target - Took maintainership - Bumped PORTREVISION PR: ports/161524 [1] Submitted by: Dan Parriott <ddpbsd@gmail.com> [1]6fed9e4e14
- Reassign to the heapb31509e7cb
- Update to 2.6 PR: ports/159786 Submitted by: Jake Smith <jake@avenue22.net> Approved by: maintainer(timeout, > 40 days)ff9f11b489
Bump PORTREVISION for ports linking to default libmysqlclient.1bda2b2725
- Update to 2.5.1 PR: ports/152169 Submitted by: Marco Re <laza_bsd@laza.it> Approved by: maintainer(timeout, >30 days)4d879c2ef9
Update to 2.4.1 PR: ports/148057 Submitted by: Marco Re <laza_bsd@laza.it> Approved by: valerio.daelli@gmail.com (maintainer timeout)9c9bce32c4
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#1d6b4b3f91
- Update to 2.0 PR: 132867 Submitted by: valerio dot daelli at ifom-ieo-campus dot it (maintainer)e7050498e2
- Update to 1.6 PR: ports/127708 Submitted by: valerio.daelli _AT_ gmail _DOT_ com (maintainer)d233f7b2a2
- Update to 1.4 PR: ports/117763 Submitted by: valerio.daelli at gmail.com (maintainer)434a5ea1da
[patch] Ossec-hids-server upgrade to 1.3 Attached patch updates ossec-hids-server to version 1.3 PR: ports/115868 Submitted by: valerio.daelli@gmail.com65fd767d1f
- Respect DOCS - Fix pkg-plist - Fix rc script PR: 113259 Submitted by: Paul Schmehl <pauls@utdallas.edu> Approved by: maintainer709418bdd1
- Update to 1.2 PR: 112960 Submitted by: Thomas Abthorpe <thomas@goodking.ca> Approved by: maintainerd7453e2ac3
Remove BROKENness by pointing to the old/ directory261efdda40
BROKEN: Unfetchablefe3a568be3
- Fix pkg-plist Submitted by: pointyhat via krisboted2d4d20df
OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting and active response. WWW: http://www.ossec.net/ PR: ports/111944 Submitted by: Valerio Daelli <valerio.daelli at gmail.com>2ab3c923e5