From 428faa21f7c04fe27e64c80da6621d1fe9e72d6c Mon Sep 17 00:00:00 2001
From: Dominik Lisiak <dominik.lisiak@bemsoft.pl>
Date: Sun, 11 Nov 2018 04:28:09 +0100
Subject: Added PostgreSQL support.

---
 security/ossec-hids-local-config/Makefile                |  4 ++--
 .../files/template-syscheck-pgsql.xml.in                 | 16 ++++++++++++++++
 security/ossec-hids-local-config/opt-logs.mk             |  4 ++--
 security/ossec-hids-local-config/opt-syscheck.mk         | 10 +++++++++-
 security/ossec-hids-local/Makefile                       |  2 +-
 5 files changed, 30 insertions(+), 6 deletions(-)
 create mode 100644 security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in

diff --git a/security/ossec-hids-local-config/Makefile b/security/ossec-hids-local-config/Makefile
index c27135e..4eaaca8 100644
--- a/security/ossec-hids-local-config/Makefile
+++ b/security/ossec-hids-local-config/Makefile
@@ -451,10 +451,10 @@ post-install: ossec-permissions
 
 .if defined(MAINTAINER_MODE)
 plist: makeplist
-	@${SCRIPTDIR}/plist.sh ${OSSEC_TYPE} ${OSSEC_HOME} ${PLIST} ${WRKDIR} ${STAGEDIR}
+	@${SH} ${SCRIPTDIR}/plist.sh ${OSSEC_TYPE} ${OSSEC_HOME} ${PLIST} ${WRKDIR} ${STAGEDIR}
 
 rules: extract
-	@${SCRIPTDIR}/rules.sh ${FILESDIR}/${RULES_DEFAULT_TEMPLATE}.in ${WRKSRC}
+	@${SH} ${SCRIPTDIR}/rules.sh ${FILESDIR}/${RULES_DEFAULT_TEMPLATE}.in ${WRKSRC}
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in b/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in
new file mode 100644
index 0000000..f8f8ad8
--- /dev/null
+++ b/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<template_config os="FreeBSD" profile="%%SYSCHECK_PGSQL_PROFILE%%">
+
+  <syscheck>
+    <directories realtime="yes" check_all="yes" restrict=".conf">/var/db/postgres</directories>
+  </syscheck>
+
+</template_config>
+
+<template_config os="Linux" profile="%%SYSCHECK_PGSQL_PROFILE%%">
+
+  <syscheck>
+    <directories realtime="yes" check_all="yes" restrict=".conf">/var/lib/postgresql</directories>
+  </syscheck>
+
+</template_config>
diff --git a/security/ossec-hids-local-config/opt-logs.mk b/security/ossec-hids-local-config/opt-logs.mk
index b706eee..687e93a 100644
--- a/security/ossec-hids-local-config/opt-logs.mk
+++ b/security/ossec-hids-local-config/opt-logs.mk
@@ -6,7 +6,7 @@ LOGS_DESC=		Log Monitoring
 # Default logs support
 LOGS_BASIC_OPTION=	BASIC
 LOGS_BASIC_PROFILE=	basic
-LOGS_BASIC_DESC=	Default system logs
+LOGS_BASIC_DESC=	Basic system logs
 LOGS_BASIC_DEFINE=	server local agent pushed
 LOGS_BASIC_DEFAULT=	server local pushed
 LOGS_OPTIONS+=		LOGS_BASIC
@@ -14,7 +14,7 @@ LOGS_OPTIONS+=		LOGS_BASIC
 # Active response log support
 LOGS_OSSEC_OPTION=	OSSEC
 LOGS_OSSEC_PROFILE=	ossec
-LOGS_OSSEC_DESC=	Active response logs
+LOGS_OSSEC_DESC=	OSSEC active response logs
 LOGS_OSSEC_DEFINE=	server local agent pushed
 LOGS_OSSEC_DEFAULT=	server local pushed
 LOGS_OPTIONS+=		LOGS_OSSEC
diff --git a/security/ossec-hids-local-config/opt-syscheck.mk b/security/ossec-hids-local-config/opt-syscheck.mk
index 9b4e6ef..5162515 100644
--- a/security/ossec-hids-local-config/opt-syscheck.mk
+++ b/security/ossec-hids-local-config/opt-syscheck.mk
@@ -6,7 +6,7 @@ SYSCHECK_DESC=			File Integrity Checking (syscheck)
 # Default direcotries
 SYSCHECK_BASIC_OPTION=		BASIC_SC
 SYSCHECK_BASIC_PROFILE=		basic
-SYSCHECK_BASIC_DESC=		"bin", "sbin" and "etc"
+SYSCHECK_BASIC_DESC=		"bin", "sbin" and "etc" directories
 SYSCHECK_BASIC_DEFINE=		server local agent pushed
 SYSCHECK_BASIC_DEFAULT=		server local pushed
 SYSCHECK_OPTIONS+=		SYSCHECK_BASIC
@@ -40,3 +40,11 @@ SYSCHECK_HOSTDENY_DESC=		Ignore access control files
 SYSCHECK_HOSTDENY_DEFINE=	server local agent pushed
 SYSCHECK_HOSTDENY_DEFAULT=	server local pushed
 SYSCHECK_OPTIONS+=		SYSCHECK_HOSTDENY
+
+# PostgreSQL directory
+SYSCHECK_PGSQL_OPTION=		PGSQL_SC
+SYSCHECK_PGSQL_PROFILE=		postgresql
+SYSCHECK_PGSQL_DESC=		PostgreSQL configuration files
+SYSCHECK_PGSQL_DEFINE=		server local agent pushed
+SYSCHECK_PGSQL_DEFAULT=		pushed
+SYSCHECK_OPTIONS+=		SYSCHECK_PGSQL
diff --git a/security/ossec-hids-local/Makefile b/security/ossec-hids-local/Makefile
index 4b189dc..8a9e538 100644
--- a/security/ossec-hids-local/Makefile
+++ b/security/ossec-hids-local/Makefile
@@ -229,7 +229,7 @@ post-install:
 
 .if defined(MAINTAINER_MODE)
 plist: makeplist
-	@${SCRIPTDIR}/plist.sh ${OSSEC_TYPE} ${OSSEC_HOME} ${PLIST} ${WRKDIR} ${STAGEDIR}
+	@${SH} ${SCRIPTDIR}/plist.sh ${OSSEC_TYPE} ${OSSEC_HOME} ${PLIST} ${WRKDIR} ${STAGEDIR}
 .endif
 
 post-install-DOCS-on:
-- 
cgit v1.2.3