OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection
System (HIDS). It has a powerful correlation and analysis engine, integrating
log analysis, file integrity checking, Windows registry monitoring, centralized
policy enforcement, rootkit detection, real-time alerting and active response.
===> The following configuration options are available for ossec-hids-local-3.8.0:
DOCS=on: Build and/or install documentation
INOTIFY=on: Kevent based real time monitoring
LUA=off: Lua scripting language support
ZEROMQ=off: ZeroMQ support (experimental)
====> Database output: you can only select none or one of them
MYSQL=off: MySQL database support
PGSQL=off: PostgreSQL database support
===> Use 'make config' to modify these settings
security/ossec-hids-local: Remove non-default option PRELUDE
prelude has been defunct for some times and has been marked deprecated.
This removes the non-default OPTION PRELUDE.
PR: 296318
Approved by: dominik.lisiak@bemsoft.pl (maintainer-timeout)
security/ossec-hids: update to 3.8.0
No additional binary changes to ossec-hids-* ports.
Changes in configuration:
- Changed default value of ossec_hids_fetch_connect_time from 40 to 60 seconds.
- Limited PostgreSQL syscheck to config files only.
PR: 285478
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
Fix build of ossec-hids-agent with -fno-common
Update the referenced master port and included version.mk file.
The patches are not relevant for ossec-hids-local, but have to be added
there to become effective in ossec-hids-agents.
Prepare for powerpc-on-clang by deleting hard-coded tests for architecture
as a stand-in for "are we running on gcc".
In some cases we only need to specifically test for "are we on the ancient
base gcc", e.g, the usage of 'pragma'.
While here, in some cases turn off SSE functions more specifically based
on ARCH, and turn off -mtune=generic everywhere. These are part of a
larger work in progress; these commits are for ports that would have
been touched by the the powerpc-on-clang test regardless.
Approved by: portmgr (tier-2 blanket)
security/security/ossec-hids-(server|local|client): SSL fix / stage QA
Fix 1: Set LDFLAGS for SSL support
Fix 2: Fix stage-QA failures in both -local and -server:
Two log files were present in these stage directories that were
not listed in the plist. One of them were registered by the
-client port so rather than remove them from the stage, add them
to the package list
Fix 3: revbump after fix 2
Approved by: SSL and general blankets
- Updated to 2.7 (ChangeLog: http://www.ossec.net/?p=577)
- Trimmed Makefile headers
- Removed patches incorporated into upstream
- Added conditional patch for compilation on 7.x, early 8.x systems
- Fixed QAT-reported plist problems
- Added new users and group for use with daemons
Requested by: various users (via private email)
