path: root/security/ossec-hids-local-config/files/pkg-deinstall.in

#!/bin/sh

ossec_home="%%OSSEC_HOME%%"
fw_drop="%%FW_DROP%%"

ar_bin_dir="${ossec_home}/active-response/bin"
ossec_conf="${ossec_home}/etc/ossec.conf"
agent_conf="${ossec_home}/etc/shared/agent.conf"

if [ "$2" == "DEINSTALL"  ]; then
    rm -f "${ossec_conf}"
    rm -f "${agent_conf}"

    if [ -n "${fw_drop}" ]; then
        if [ "${ar_bin_dir}/${fw_drop}" -ef "${ar_bin_dir}/firewall-drop.sh" ]; then
            rm -f "${ar_bin_dir}/firewall-drop.sh"
        fi
    fi
fi