blob: 756b49f80c3db0b684665eb3a3c286041b66033c (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
#!/bin/sh
fixed_lines="
%%LUA%%@(,,0550) %%OSSEC_HOME%%/bin/ossec-lua
%%LUA%%@(,,0550) %%OSSEC_HOME%%/bin/ossec-luac"
if [ "${OSSEC_TYPE}" != "agent" ]; then
fixed_lines="${fixed_lines}
%%MYSQL%%%%DOCSDIR%%/mysql.schema
%%PGSQL%%%%DOCSDIR%%/postgresql.schema"
fi
skip_lines="
%%PORTDOCS%%%%DOCSDIR%%/mysql.schema
%%PORTDOCS%%%%DOCSDIR%%/postgresql.schema"
skip_paths="
/etc/ossec.conf
/etc/client.keys
/logs/active-responses.log
/logs/ossec.log
/lua"
if [ "${OSSEC_TYPE}" = "agent" ]; then
skip_paths="${skip_paths}
/rules
/agentless
/.ssh"
fi
sample_paths="
/etc/local_internal_options.conf.sample
/active-response/bin/cloudflare-ban.sh.sample
/active-response/bin/ossec-aws-waf.sh.sample
/active-response/bin/ossec-pagerduty.sh.sample
/active-response/bin/ossec-slack.sh.sample
/active-response/bin/ossec-tweeter.sh.sample"
if [ "${OSSEC_TYPE}" != "agent" ]; then
sample_paths="${sample_paths}
/rules/local_rules.xml.sample"
fi
|
