Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Jun 2021 07:17:00 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 256545] securuty/ossec-hids-server: 3.6.0_1 rc script fails to generate ossec.conf agent.conf
Message-ID:  <bug-256545-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256545

            Bug ID: 256545
           Summary: securuty/ossec-hids-server: 3.6.0_1 rc script fails to
                    generate ossec.conf agent.conf
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: sa.inbox@gmail.com

Hello.

ossec-hids script fails to generate ossec.conf and agent.conf files with
default (right after installation) setup.

Diagnostic steps:
Install security/ossec-hids-server and security/ossec-hids-server-config po=
rts.
Generation of configuration files fails right after installation (in default
configuration):
# /usr/local/etc/rc.d/ossec-hids ossec_conf
<!-- OSSEC HIDS 3.6.0 -->

<!-- DO NOT EDIT - file generated automatically - edit
"ossec.conf.d/900.local.conf" instead -->

<ossec_config>
  <rules>
sed: 1: "/^\s*$/d": RE error: trailing backslash (\)
  </rules>
  <rootcheck>
sed: 1: "/^\s*$/d": RE error: trailing backslash (\)
  </rootcheck>
  <syscheck>
sed: 1: "/^\s*$/d": RE error: trailing backslash (\)
  </syscheck>
sed: 1: "/^\s*$/d": RE error: trailing backslash (\)
</ossec_config>
# sudo /usr/local/etc/rc.d/ossec-hids agent_conf

<!-- OSSEC HIDS 3.6.0 -->

<!-- DO NOT EDIT - file generated automatically - edit
"agent.conf.d/900.local.conf" instead -->

sed: 1: "/^\s*$/d": RE error: trailing backslash (\)

-------------
Build options for security/ossec-hids-server security/ossec-hids-server-con=
fig
~ % cd /usr/ports/security/ossec-hids-server && make showconfig
=3D=3D=3D> The following configuration options are available for
ossec-hids-server-3.6.0_1:
     DOCS=3Don: Build and/or install documentation
     INOTIFY=3Don: Kevent based real time monitoring
     LUA=3Doff: Lua scripting language support
     PRELUDE=3Doff: Sensor support from Prelude SIEM
     ZEROMQ=3Doff: ZeroMQ support (experimental)
=3D=3D=3D=3D> Database output: you can only select none or one of them
     MYSQL=3Doff: MySQL database support
     PGSQL=3Doff: PostgreSQL database support
=3D=3D=3D> Use 'make config' to modify these settings
 % cd /usr/ports/security/ossec-hids-server-config && make showconfig
=3D=3D=3D> The following configuration options are available for
ossec-hids-server-config-3.6.0_1:
=3D=3D=3D=3D> Alerting Rules
     DEFAULT_R=3Don: Rules provided by OSSEC
     CONFIG_R=3Don: Alert changes of the OSSEC main configuration files
     CMDOUT_R=3Don: Alert changes of output of the monitored commands
=3D=3D=3D=3D> Active Response
     DEFAULT_C=3Don: Commands provided by OSSEC
     MERGE_C=3Don: Commands to merge configuration files
     MERGE_AR=3Don: Merge configuration files when they change
     RESTART_AR=3Don: Restart OSSEC when main configuration files change
     HOSTDENY_AR=3Doff: Block the attacker's IP using access control files
     FWDROP_AR=3Doff: Block the attacker's IP on the firewall
=3D=3D=3D=3D> System Audit and Rootkit Detection (rootcheck)
     BASIC_RC=3Don: Basic audit and rootkits
=3D=3D=3D=3D> File Integrity Checking (syscheck)
     NEWFILES_SC=3Don: Alert on new files created
     NOAUTO_SC=3Don: Disable auto_ignore feature
     BASIC_SC=3Don: "bin", "sbin" and "etc" directories
     OSSEC_SC=3Don: OSSEC directories
     PGSQL_SC=3Don: PostgreSQL configuration files
=3D=3D=3D=3D> Command Output Monitoring
     LOGINS=3Don: Last logins
     PORTS_TCP=3Don: Open TCP ports
     PORTS_UDP=3Doff: Open UDP ports
=3D=3D=3D=3D> Log Monitoring
     BASIC=3Don: Basic system logs
     OSSEC=3Don: OSSEC active response logs
     APACHE=3Don: Apache logs
     NGINX=3Doff: Nginx logs
     RADIUS=3Doff: FreeRADIUS logs
     VSFTPD=3Doff: Vsftpd logs
=3D=3D=3D=3D> Pushed System Audit and Rootkit Detection (rootcheck)
     BASIC_RC_P=3Don: Basic audit and rootkits (profile: basic)
     CIS_RC_P=3Don: CIS benchmark - Legacy (profile: cis)
     CIS_L1_RC_P=3Don: CIS benchmark - Level 1 (profile: cis-level1)
     CIS_L2_RC_P=3Don: CIS benchmark - Level 2 (profile: cis-level2)
=3D=3D=3D=3D> Pushed File Integrity Checking (syscheck)
     BASIC_SC_P=3Don: "bin", "sbin" and "etc" directories (profile: basic)
     OSSEC_SC_P=3Don: OSSEC directories (profile: ossec)
     PGSQL_SC_P=3Don: PostgreSQL configuration files (profile: postgresql)
=3D=3D=3D=3D> Pushed Log Monitoring
     BASIC_P=3Don: Basic system logs (profile: basic)
     OSSEC_P=3Don: OSSEC active response logs (profile: ossec)
     APACHE_P=3Don: Apache logs (profile: apache)
     NGINX_P=3Don: Nginx logs (profile: nginx)
     RADIUS_P=3Doff: FreeRADIUS logs (profile: radius)
     VSFTPD_P=3Doff: Vsftpd logs (profile: vsftpd)
=3D=3D=3D=3D> Active Response Firewall: you have to select exactly one of t=
hem
     NOFW=3Doff: Custom or no firewall
     IPF=3Doff: ipfilter
     IPFW=3Doff: ipfirewall
     PF=3Don: Packet Filter

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-256545-7788>