security/ossec-hids: update to 3.8.0

No additional binary changes to ossec-hids-* ports.

Changes in configuration:
- Changed default value of ossec_hids_fetch_connect_time from 40 to 60 seconds.
- Limited PostgreSQL syscheck to config files only.

PR:		285478
This commit is contained in:
Philippe Audeoud 2025-03-17 12:31:01 +01:00
parent 4c81919fdc
commit abfff1b87f
5 changed files with 8 additions and 9 deletions

View file

@ -2,7 +2,7 @@
<template_config os="FreeBSD" profile="%%SYSCHECK_PGSQL_PROFILE%%"> <template_config os="FreeBSD" profile="%%SYSCHECK_PGSQL_PROFILE%%">
<syscheck> <syscheck>
<directories realtime="yes" check_all="yes" restrict=".conf">/var/db/postgres</directories> <directories realtime="yes" check_all="yes" no_recurse="yes" restrict=".conf">/var/db/postgres</directories>
</syscheck> </syscheck>
</template_config> </template_config>
@ -10,7 +10,7 @@
<template_config os="Linux" profile="%%SYSCHECK_PGSQL_PROFILE%%"> <template_config os="Linux" profile="%%SYSCHECK_PGSQL_PROFILE%%">
<syscheck> <syscheck>
<directories realtime="yes" check_all="yes" restrict=".conf">/var/lib/postgresql</directories> <directories realtime="yes" check_all="yes" no_recurse="yes" restrict=".conf">/var/lib/postgresql</directories>
</syscheck> </syscheck>
</template_config> </template_config>

View file

@ -1,4 +1,3 @@
PORTREVISION?= 1
PKGNAMESUFFIX?= -${OSSEC_TYPE} PKGNAMESUFFIX?= -${OSSEC_TYPE}
COMMENT?= Security tool to monitor and check logs and intrusions - local (standalone) installation COMMENT?= Security tool to monitor and check logs and intrusions - local (standalone) installation
WWW= https://ossec.github.io WWW= https://ossec.github.io

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1656551293 TIMESTAMP = 1740298126
SHA256 (ossec-ossec-hids-3.7.0_GH0.tar.gz) = 23f5ede50f5de449db0a571fc453977f7079b4b47ce90b0ef31feed20df100e9 SHA256 (ossec-ossec-hids-3.8.0_GH0.tar.gz) = bd857a2dd7d0559ef59b4a9ec276f3a8ade6830f8aed257e8f4a62106cfe5f38
SIZE (ossec-ossec-hids-3.7.0_GH0.tar.gz) = 2518737 SIZE (ossec-ossec-hids-3.8.0_GH0.tar.gz) = 2524057

View file

@ -13,7 +13,7 @@
# Default: NO # Default: NO
# ossec_hids_fetch_connect_time (int): Time in seconds to wait for the download of the shared configuration to start. # ossec_hids_fetch_connect_time (int): Time in seconds to wait for the download of the shared configuration to start.
# Used only by agent installation. # Used only by agent installation.
# Default: 40 # Default: 60
# ossec_hids_fetch_read_time (int): Time in seconds to wait for subsequent download chunks of the shared configuration. # ossec_hids_fetch_read_time (int): Time in seconds to wait for subsequent download chunks of the shared configuration.
# Used only by agent installation. # Used only by agent installation.
# Default: 10 # Default: 10
@ -28,7 +28,7 @@ load_rc_config $name
: ${ossec_hids_enable="NO"} : ${ossec_hids_enable="NO"}
: ${ossec_hids_clear_log="NO"} : ${ossec_hids_clear_log="NO"}
: ${ossec_hids_clear_ar_log="NO"} : ${ossec_hids_clear_ar_log="NO"}
: ${ossec_hids_fetch_connect_time=40} : ${ossec_hids_fetch_connect_time=60}
: ${ossec_hids_fetch_read_time=10} : ${ossec_hids_fetch_read_time=10}
ossec_type="%%OSSEC_TYPE%%" ossec_type="%%OSSEC_TYPE%%"

View file

@ -1,5 +1,5 @@
PORTNAME= ossec-hids PORTNAME= ossec-hids
PORTVERSION= 3.7.0 PORTVERSION= 3.8.0
CATEGORIES= security CATEGORIES= security
MAINTAINER= dominik.lisiak@bemsoft.pl MAINTAINER= dominik.lisiak@bemsoft.pl