CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/ossec-hids-server 3.8.0

Security tool to monitor and check logs and intrusions - server installation

Port info

Maintainer
dominik.lisiak@bemsoft.pl
Packages
latest: 3.8.0
Upstream
up to date
Last update
to 3.8.0 via security/ossec-hids-local · 822ec4a435
Quarterly
2026Q4: 3.8.0
WWW
https://ossec.github.io
Links
cgit · VuXML

Install

Package
# pkg install ossec-hids-server
installs 3.8.0 from latest; from quarterly (2026Q4) 3.8.0
Port
# cd /usr/ports/security/ossec-hids-server && make install clean
# make -C /usr/ports/security/ossec-hids-server config  # change options first
Size
667 KiB download · 4.6 MiB installed
Depends on
devel/libevent 2.1.13, devel/libinotify 20240724_3, devel/pcre2 10.49, lang/expect 5.45.4_6,1
License
GPLv2
Creates
user ossec, ossecm, ossecr, group ossec
Options
2 of 6 on in the package: DOCS INOTIFY
Show the 4 options that are off
LUA MYSQL PGSQL ZEROMQ
pkg-message
Shown after installing
All the files related to OSSEC have been installed in:
/usr/local/ossec-hids

You need to create main configuration file:
/usr/local/ossec-hids/etc/ossec.conf

For information on proper configuration see:
https://www.ossec.net/docs/syntax/ossec_config.html

To enable the startup script add ossec_hids_enable="YES" to /etc/rc.conf.

If you intend to use "firewall-drop" active response on this OSSEC instance
create the script:
/usr/local/ossec-hids/active-response/bin/firewall-drop.sh

You can copy or hard link (symbolic link is not supported) one of the scripts
already provided by OSSEC:
/usr/local/ossec-hids/active-response/bin/ipfilter.sh
/usr/local/ossec-hids/active-response/bin/ipfw.sh
/usr/local/ossec-hids/active-response/bin/pf.sh

For further steps see the documentation:
https://www.ossec.net/docs/syntax/head_ossec_config.active-response.html

Consider installing "security/ossec-hids-server-config" to ease
OSSEC configuration.

For additional help execute:
# /usr/local/etc/rc.d/ossec-hids help

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.8.0✗–
FreeBSD 153.8.0✗–
FreeBSD 143.8.0✗3.8.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.8.0✗–
FreeBSD 143.8.0✗3.8.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.8.0.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (46)

Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Fernando Apesteguía (fernape)
security/ossec-hids*: update to 3.5.0

ChangeLogs:
        https://github.com/ossec/ossec-hids/releases/tag/3.4.0
        https://github.com/ossec/ossec-hids/releases/tag/3.5.0

PR:     242110
Submitted by:   dominik.lisiak@bemsoft.pl (maintainer)
64391cfc2a
Steve Wills (swills)
security/ossec-hids-server: update from 2.8.3 to 3.1.0

PR:		232794
Submitted by:	Dominik Lisiak <dominik.lisiak@bemsoft.pl> (maintainer)
868061ef79
Brad Davis (brd) · 2.8.3_3
Fix database support in ossec-hids-local and pass maintainer to submitter

PR:		221269
Submitted by:	Dominik Lisiak <dominik.lisiak@bemsoft.pl>
9dc2cd8008
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.8.3_2
Update devel/readline to 7.0 patch 3

- Bump PORTREVISION for shlib change

Changes:	https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
		https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
		https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision:	https://reviews.freebsd.org/D11172
PR:		219947
Exp-run by:	antoine
cb037d3c98
John Marino (marino) · 2.8.3_1
security/security/ossec-hids-(server|local|client): SSL fix / stage QA

Fix 1: Set LDFLAGS for SSL support
Fix 2: Fix stage-QA failures in both -local and -server:
       Two log files were present in these stage directories that were
       not listed in the plist.  One of them were registered by the
       -client port so rather than remove them from the stage, add them
       to the package list
Fix 3: revbump after fix 2

Approved by:	SSL and general blankets
6a739f4a97
Mark Linimon (linimon) · 2.8.3
Mark as broken on various tier-2 archs.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
c92cf8332c
Matthew Seaman (matthew) · 2.8.3
* Modernize OPTIONS handling somewhat: this fixes compilation when   either the MYSQL or PGSQL options are enabled

* Add OPTION-dependent targets to install the postgresql or mysql DB
  schemas as portdocs when either of those two options are enabled.

* Add a patch for the DB schemas to allow for longer entries in the
  system.information column (submitted upstream and committed as
  https://github.com/ossec/ossec-hids/commit/7a4b0d32e2b67bbef5d68dd7aeeee4e70b9c1982

* Add a 'reload' command to the ossec-hids RC script

* Update to version 2.8.3

* Generally update patch files via 'make makepatch'

* Change expect scripts used by agentlessd to group ossec so they are
  executable by the ossec user.

* Use shebangfix to set an explicit path to where expect is installed,
  since it isn't on the default path inherited from the system init
  scripts, so /usr/bin/env doesn't find the command interpreter.

* Change CONFLICTS to CONFLICTS_INSTALL between each of the the
  ossec-hids-{client,local,server} ports.

DB changes compile tested with postgresql and mysql, but only
thoroughly run-time tested with postgresql.

PR:		208935
Submitted by:	matthew
Approved by:	brd (maintainer)
14bb261c94
Mathieu Arnold (mat) · 2.8.2
Fix build as a user.

While there, merge do-install and post-install, and use an option
target helper.

Sponsored by:	Absolight
970c34a2dc
Brad Davis (brd) · 2.8.2
Update security/ossec-hids-* to 2.8.2.

Approved by:	swills (mentor)
MFH:		2015Q2
Security:	c470db07-1098-11e5-b6a8-002590263bf5
7f16b2fac1
Dmitry Marakasov (amdmi3) · 2.8.1_1
- Don't cat pkg-message from Makefiles

Approved by:	portmgr blanket
68a5cc350c
Mathieu Arnold (mat) · 2.8.1_1
Remove OSVERSION checks that do not make sense any more.

For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).

Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.

Differential Revision:	https://reviews.freebsd.org/D2209
0438143249
Tijl Coosemans (tijl) · 2.8.1_1
Add missing USE_OPENSSL=yes

PR:		195796
c88aaf5c89
Chris Rees (crees) · 2.8.1
Finally retire USE_PGSQL
4cb60faedd
Brad Davis (brd) · 2.8.1
Update to 2.8.1 which addresses CVE-2014-5284.

Reviewed by:	zi@
Security:	36858e78-3963-11e4-ad84-000c29f6ae42
3ba38fc97b
Adam Weinberger (adamw) · 2.8
Fix build on -current.
758b4b1d1b
Adam Weinberger (adamw) · 2.8
Add USES=readline to fix build on -current.
2ac8e45b30
Brad Davis (brd) · 2.8
- Update to 2.8 - Fix permissions preventing server and local from starting correctly

Reviewed by:	swills@
4cbf9a39b2
Brad Davis (brd) · 2.7.1
- Fix the permissions so ossec-hids-client will actually start.

1: Based on a submission by Johan

PR:		190709 [1]
Submitted by:	Johan Strom <johan@stromnet.se> [1]
Reviewed by:	swills@
bd445ab0c7
Brad Davis (brd) · 2.7.1
- Add a patch I missed that fixes the build of ossec-hids-client.

Reviewed by:	zi@
Noticed by:		swills@ / jenkins
Pointy hat to:	me
8ae8a4f090
Ryan Steinmetz (zi) · 2.7.1
- Update COMMENT
60e4627abf
Ryan Steinmetz (zi) · 2.7.1
- Update MAINTAINER
771c493803
Brad Davis (brd) · 2.7.1
- Update ossec to 2.7.1 - Stagify - Fix build with clang

Reviewed by:   zi@
9da100720e
Greg Larkin (glarkin) · 2.7
[Errno 11] Resource Temporarily Unavailable

Reassigning my ports back to the pool with the hope of freeing up
to do more FreeBSD work in the future.

Submitted by:	glarkin
43b0eb0cb0
Baptiste Daroussin (bapt) · 2.7
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Greg Larkin (glarkin) · 2.7
- Updated to 2.7 (ChangeLog: http://www.ossec.net/?p=577) - Trimmed Makefile headers - Removed patches incorporated into upstream - Added conditional patch for compilation on 7.x, early 8.x systems - Fixed QAT-reported plist problems - Added new users and group for use with daemons

Requested by:	various users (via private email)
9d5e4df451
Doug Barton (dougb) · 2.6_2
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Greg Larkin (glarkin) · 2.6_2
- Applied the startup script patch from PR ports/161524 to the local   installation type [1] - Streamlined the rc.d file to use fewer functions - Added a precmd to the rc.d file to ensure the proper ownership on   some queue files. OSSEC daemons don't properly chown them upon creation. - Bumped PORTREVISION

Reported by:	Albert Gabas <agabas@astabis.com> (via email) [1]
Feature safe:	yes
8f7496f7d8
Greg Larkin (glarkin) · 2.6_1
- Fixed broken path in startup control script [1] - Fixed a link in pkg-message to point to a more up-to-date doc page [1] - Removed unnecessary WITH_BDB knob [1] - Reformatted pkg-message - Regenerated/renamed patch files with makepatch target - Took maintainership - Bumped PORTREVISION

PR:		ports/161524 [1]
Submitted by:	Dan Parriott <ddpbsd@gmail.com> [1]
6fed9e4e14
Thomas Abthorpe (tabthorpe) · 2.6
- Reassign to the heap
b31509e7cb
Wen Heping (wen) · 2.6
- Update to 2.6

PR:		ports/159786
Submitted by:	Jake Smith <jake@avenue22.net>
Approved by:	maintainer(timeout, > 40 days)
ff9f11b489
Alex Dupre (ale) · 2.5.1_1
Bump PORTREVISION for ports linking to default libmysqlclient.
1bda2b2725
Wen Heping (wen) · 2.5.1
- Update to 2.5.1

PR:		ports/152169
Submitted by:	Marco Re <laza_bsd@laza.it>
Approved by:	maintainer(timeout, >30 days)
4d879c2ef9
Wesley Shields (wxs) · 2.4.1
Update to 2.4.1

PR:		ports/148057
Submitted by:	Marco Re <laza_bsd@laza.it>
Approved by:	valerio.daelli@gmail.com (maintainer timeout)
9c9bce32c4
Doug Barton (dougb) · 2.0
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Dmitry Marakasov (amdmi3) · 2.0
- Update to 2.0

PR:		132867
Submitted by:	valerio dot daelli at ifom-ieo-campus dot it (maintainer)
e7050498e2
Philippe Audeoud (jadawin) · 1.6
- Update to 1.6

PR:		ports/127708
Submitted by:	valerio.daelli _AT_ gmail _DOT_ com (maintainer)
d233f7b2a2
Rong-En Fan (rafan) · 1.4
- Update to 1.4

PR:		ports/117763
Submitted by:	valerio.daelli at gmail.com (maintainer)
434a5ea1da
Edwin Groothuis (edwin) · 1.3
[patch] Ossec-hids-server upgrade to 1.3

Attached patch updates ossec-hids-server to version 1.3

PR:		ports/115868
Submitted by:	valerio.daelli@gmail.com
65fd767d1f
Martin Wilke (miwi) · 1.2
- Respect DOCS - Fix pkg-plist - Fix rc script

PR:		113259
Submitted by:	Paul Schmehl <pauls@utdallas.edu>
Approved by:	maintainer
709418bdd1
Martin Wilke (miwi) · 1.2
- Update to 1.2

PR:		112960
Submitted by:	Thomas Abthorpe <thomas@goodking.ca>
Approved by:	maintainer
d7453e2ac3
Edwin Groothuis (edwin) · 1.1_1
Remove BROKENness by pointing to the old/ directory
261efdda40
Kris Kennaway (kris) · 1.1_1
BROKEN: Unfetchable
fe3a568be3
Martin Wilke (miwi) · 1.1_1
- Fix pkg-plist

Submitted by:   pointyhat via krisbot
ed2d4d20df
Martin Wilke (miwi) · 1.1
OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting and active response.

WWW: http://www.ossec.net/

PR:		ports/111944
Submitted by:	Valerio Daelli <valerio.daelli at gmail.com>
2ab3c923e5