%if %{_debugenabled} == yes %global _enable_debug_package 0 %global debug_package %{nil} %global __os_install_post %{nil} %define __strip /bin/true %endif Summary: Wazuh helps you to gain security visibility into your infrastructure by monitoring hosts at an operating system and application level. It provides the following capabilities: log analysis, file integrity monitoring, intrusions detection and policy and compliance monitoring Name: wazuh-agent Version: 4.4.5 Release: %{_release} License: GPL Group: System Environment/Daemons Source0: %{name}-%{version}.tar.gz URL: https://www.wazuh.com/ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Vendor: Wazuh, Inc Packager: Wazuh, Inc Requires(pre): /usr/sbin/groupadd /usr/sbin/useradd Requires(postun): /usr/sbin/groupdel /usr/sbin/userdel Conflicts: ossec-hids ossec-hids-agent wazuh-manager wazuh-local AutoReqProv: no Requires: coreutils %if 0%{?el} >= 6 || 0%{?rhel} >= 6 BuildRequires: coreutils glibc-devel automake autoconf libtool policycoreutils-python perl %else BuildRequires: coreutils glibc-devel automake autoconf libtool policycoreutils perl %endif ExclusiveOS: linux %description Wazuh helps you to gain security visibility into your infrastructure by monitoring hosts at an operating system and application level. It provides the following capabilities: log analysis, file integrity monitoring, intrusions detection and policy and compliance monitoring %prep %setup -q ./gen_ossec.sh conf agent centos %rhel %{_localstatedir} > etc/ossec-agent.conf %build pushd src # Rebuild for agent make clean %if 0%{?el} >= 6 || 0%{?rhel} >= 6 make deps TARGET=agent make -j%{_threads} TARGET=agent USE_SELINUX=yes DEBUG=%{_debugenabled} %else %ifnarch x86_64 MSGPACK="USE_MSGPACK_OPT=no" %endif deps_version=`cat Makefile | grep "DEPS_VERSION =" | cut -d " " -f 3` make deps RESOURCES_URL=http://packages.wazuh.com/deps/${deps_version} TARGET=agent make -j%{_threads} TARGET=agent USE_AUDIT=no USE_SELINUX=yes USE_EXEC_ENVIRON=no DEBUG=%{_debugenabled} ${MSGPACK} %endif popd %install # Clean BUILDROOT rm -fr %{buildroot} echo 'USER_LANGUAGE="en"' > ./etc/preloaded-vars.conf echo 'USER_NO_STOP="y"' >> ./etc/preloaded-vars.conf echo 'USER_INSTALL_TYPE="agent"' >> ./etc/preloaded-vars.conf echo 'USER_DIR="%{_localstatedir}"' >> ./etc/preloaded-vars.conf echo 'USER_DELETE_DIR="y"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_ACTIVE_RESPONSE="y"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_SYSCHECK="y"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_ROOTCHECK="y"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_OPENSCAP="n"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_SYSCOLLECTOR="y"' >> ./etc/preloaded-vars.conf echo 'USER_ENABLE_CISCAT="y"' >> ./etc/preloaded-vars.conf echo 'USER_UPDATE="n"' >> ./etc/preloaded-vars.conf echo 'USER_AGENT_SERVER_IP="MANAGER_IP"' >> ./etc/preloaded-vars.conf echo 'USER_CA_STORE="/path/to/my_cert.pem"' >> ./etc/preloaded-vars.conf echo 'USER_AUTO_START="n"' >> ./etc/preloaded-vars.conf ./install.sh %if 0%{?el} < 6 || 0%{?rhel} < 6 mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir} touch ${RPM_BUILD_ROOT}%{_sysconfdir}/ossec-init.conf %endif # Create directories mkdir -p ${RPM_BUILD_ROOT}%{_initrddir} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/.ssh # Copy the installed files into RPM_BUILD_ROOT directory cp -pr %{_localstatedir}/* ${RPM_BUILD_ROOT}%{_localstatedir}/ mkdir -p ${RPM_BUILD_ROOT}/usr/lib/systemd/system/ sed -i "s:WAZUH_HOME_TMP:%{_localstatedir}:g" src/init/templates/ossec-hids-rh.init install -m 0755 src/init/templates/ossec-hids-rh.init ${RPM_BUILD_ROOT}%{_initrddir}/wazuh-agent sed -i "s:WAZUH_HOME_TMP:%{_localstatedir}:g" src/init/templates/wazuh-agent.service install -m 0644 src/init/templates/wazuh-agent.service ${RPM_BUILD_ROOT}/usr/lib/systemd/system/ # Clean the preinstalled configuration assesment files rm -f ${RPM_BUILD_ROOT}%{_localstatedir}/ruleset/sca/* # Install configuration assesment files and files templates mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/{generic} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/{1,2} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/{8,7,6,5} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/{9,8,7,6,5} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/{11,12,15} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/{11,12} mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/{29,30,31,32,33,34} cp -r ruleset/sca/{generic,centos,rhel,sles,amazon} ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp cp etc/templates/config/generic/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/generic cp etc/templates/config/amzn/1/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/1 cp etc/templates/config/amzn/2/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/2 cp etc/templates/config/centos/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos cp etc/templates/config/centos/8/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/8 cp etc/templates/config/centos/7/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/7 cp etc/templates/config/centos/6/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/6 cp etc/templates/config/centos/5/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/5 cp etc/templates/config/rhel/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel cp etc/templates/config/rhel/9/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/9 cp etc/templates/config/rhel/8/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/8 cp etc/templates/config/rhel/7/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/7 cp etc/templates/config/rhel/6/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/6 cp etc/templates/config/rhel/5/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/5 cp etc/templates/config/sles/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles cp etc/templates/config/sles/11/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/11 cp etc/templates/config/sles/12/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/12 cp etc/templates/config/sles/15/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/15 cp etc/templates/config/suse/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse cp etc/templates/config/suse/11/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/11 cp etc/templates/config/suse/12/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/12 cp etc/templates/config/fedora/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora cp etc/templates/config/fedora/29/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/29 cp etc/templates/config/fedora/30/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/30 cp etc/templates/config/fedora/31/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/31 cp etc/templates/config/fedora/32/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/32 cp etc/templates/config/fedora/33/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/33 cp etc/templates/config/fedora/34/sca.files ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/34 # Add configuration scripts mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/ cp gen_ossec.sh ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/ cp add_localfiles.sh ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/ # Templates for initscript mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/src/init mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/generic mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/centos mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/rhel mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/suse mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/sles # Add SUSE initscript sed -i "s:WAZUH_HOME_TMP:%{_localstatedir}:g" src/init/templates/ossec-hids-suse.init cp -rp src/init/templates/ossec-hids-suse.init ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/src/init/ # Copy scap templates cp -rp etc/templates/config/generic/* ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/generic cp -rp etc/templates/config/centos/* ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/centos cp -rp etc/templates/config/rhel/* ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/rhel cp -rp etc/templates/config/suse/* ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/suse cp -rp etc/templates/config/sles/* ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/sles install -m 0640 src/init/*.sh ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/src/init # Add installation scripts cp src/VERSION ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/src/ cp src/REVISION ${RPM_BUILD_ROOT}%{_localstatedir}/packages_files/agent_installation_scripts/src/ exit 0 %pre # Create the wazuh group if it doesn't exists if command -v getent > /dev/null 2>&1 && ! getent group wazuh > /dev/null 2>&1; then groupadd -r wazuh elif ! getent group wazuh > /dev/null 2>&1; then groupadd -r wazuh fi # Create the wazuh user if it doesn't exists if ! getent passwd wazuh > /dev/null 2>&1; then useradd -g wazuh -G wazuh -d %{_localstatedir} -r -s /sbin/nologin wazuh fi # Stop the services to upgrade the package if [ $1 = 2 ]; then if command -v systemctl > /dev/null 2>&1 && systemctl > /dev/null 2>&1 && systemctl is-active --quiet wazuh-agent > /dev/null 2>&1; then systemctl stop wazuh-agent.service > /dev/null 2>&1 touch %{_localstatedir}/tmp/wazuh.restart # Check for SysV elif command -v service > /dev/null 2>&1 && service wazuh-agent status 2>/dev/null | grep "is running" > /dev/null 2>&1; then service wazuh-agent stop > /dev/null 2>&1 touch %{_localstatedir}/tmp/wazuh.restart elif %{_localstatedir}/bin/wazuh-control status 2>/dev/null | grep "is running" > /dev/null 2>&1; then touch %{_localstatedir}/tmp/wazuh.restart elif %{_localstatedir}/bin/ossec-control status 2>/dev/null | grep "is running" > /dev/null 2>&1; then touch %{_localstatedir}/tmp/wazuh.restart fi %{_localstatedir}/bin/ossec-control stop > /dev/null 2>&1 || %{_localstatedir}/bin/wazuh-control stop > /dev/null 2>&1 fi %post echo "VERSION=\"$(%{_localstatedir}/bin/wazuh-control info -v)\"" > /etc/ossec-init.conf if [ $1 = 2 ]; then if [ -d %{_localstatedir}/logs/ossec ]; then rm -rf %{_localstatedir}/logs/wazuh cp -rp %{_localstatedir}/logs/ossec %{_localstatedir}/logs/wazuh fi if [ -d %{_localstatedir}/queue/ossec ]; then rm -rf %{_localstatedir}/queue/sockets cp -rp %{_localstatedir}/queue/ossec %{_localstatedir}/queue/sockets fi fi # If the package is being installed if [ $1 = 1 ]; then touch %{_localstatedir}/logs/active-responses.log chown wazuh:wazuh %{_localstatedir}/logs/active-responses.log chmod 0660 %{_localstatedir}/logs/active-responses.log . %{_localstatedir}/packages_files/agent_installation_scripts/src/init/dist-detect.sh # Generating ossec.conf file %{_localstatedir}/packages_files/agent_installation_scripts/gen_ossec.sh conf agent ${DIST_NAME} ${DIST_VER}.${DIST_SUBVER} %{_localstatedir} > %{_localstatedir}/etc/ossec.conf chown root:wazuh %{_localstatedir}/etc/ossec.conf # Add default local_files to ossec.conf %{_localstatedir}/packages_files/agent_installation_scripts/add_localfiles.sh %{_localstatedir} >> %{_localstatedir}/etc/ossec.conf # Register and configure agent if Wazuh environment variables are defined %{_localstatedir}/packages_files/agent_installation_scripts/src/init/register_configure_agent.sh %{_localstatedir} > /dev/null || : fi if [ -f /etc/os-release ]; then source /etc/os-release if [ "${NAME}" = "Red Hat Enterprise Linux" ] && [ "$((${VERSION_ID:0:1}))" -ge 9 ]; then rm -f %{_initrddir}/wazuh-agent fi fi # We create this fix for the operating system that deprecated the SySV. For now, this fix is for suse/openSUSE sles="" if [ -f /etc/SuSE-release ]; then sles="suse" elif [ -f /etc/os-release ]; then if `grep -q "\"sles" /etc/os-release` ; then sles="suse" elif `grep -q -i "\"opensuse" /etc/os-release` ; then sles="opensuse" fi fi if [ -n "$sles" ] && [ $(ps --no-headers -o comm 1) == "systemd" ]; then if [ -f /etc/init.d/wazuh-agent ]; then rm -f /etc/init.d/wazuh-agent fi fi # Delete the installation files used to configure the agent rm -rf %{_localstatedir}/packages_files # Remove unnecessary files from shared directory rm -f %{_localstatedir}/etc/shared/*.rpmnew # CentOS if [ -r "/etc/centos-release" ]; then DIST_NAME="centos" DIST_VER=`sed -rn 's/.* ([0-9]{1,2})\.*[0-9]{0,2}.*/\1/p' /etc/centos-release` # Fedora elif [ -r "/etc/fedora-release" ]; then DIST_NAME="fedora" DIST_VER=`sed -rn 's/.* ([0-9]{1,2})\.*[0-9]{0,2}.*/\1/p' /etc/fedora-release` # RedHat elif [ -r "/etc/redhat-release" ]; then if grep -q "CentOS" /etc/redhat-release; then DIST_NAME="centos" else DIST_NAME="rhel" fi DIST_VER=`sed -rn 's/.* ([0-9]{1,2})\.*[0-9]{0,2}.*/\1/p' /etc/redhat-release` # SUSE elif [ -r "/etc/SuSE-release" ]; then if grep -q "openSUSE" /etc/SuSE-release; then DIST_NAME="generic" DIST_VER="" else DIST_NAME="sles" DIST_VER=`sed -rn 's/.*VERSION = ([0-9]{1,2}).*/\1/p' /etc/SuSE-release` fi elif [ -r "/etc/os-release" ]; then . /etc/os-release DIST_NAME=$ID DIST_VER=$(echo $VERSION_ID | sed -rn 's/[^0-9]*([0-9]+).*/\1/p') if [ "X$DIST_VER" = "X" ]; then DIST_VER="0" fi if [ "$DIST_NAME" = "amzn" ] && [ "$DIST_VER" != "2" ]; then DIST_VER="1" fi DIST_SUBVER=$(echo $VERSION_ID | sed -rn 's/[^0-9]*[0-9]+\.([0-9]+).*/\1/p') if [ "X$DIST_SUBVER" = "X" ]; then DIST_SUBVER="0" fi else DIST_NAME="generic" DIST_VER="" fi SCA_DIR="${DIST_NAME}/${DIST_VER}" SCA_BASE_DIR="%{_localstatedir}/tmp/sca-%{version}-%{release}-tmp" mkdir -p %{_localstatedir}/ruleset/sca SCA_TMP_DIR="${SCA_BASE_DIR}/${SCA_DIR}" # Install the configuration files needed for this hosts if [ -r "${SCA_BASE_DIR}/${DIST_NAME}/${DIST_VER}/${DIST_SUBVER}/sca.files" ]; then SCA_TMP_DIR="${SCA_BASE_DIR}/${DIST_NAME}/${DIST_VER}/${DIST_SUBVER}" elif [ -r "${SCA_BASE_DIR}/${DIST_NAME}/${DIST_VER}/sca.files" ]; then SCA_TMP_DIR="${SCA_BASE_DIR}/${DIST_NAME}/${DIST_VER}" elif [ -r "${SCA_BASE_DIR}/${DIST_NAME}/sca.files" ]; then SCA_TMP_DIR="${SCA_BASE_DIR}/${DIST_NAME}" else SCA_TMP_DIR="${SCA_BASE_DIR}/generic" fi SCA_TMP_FILE="${SCA_TMP_DIR}/sca.files" if [ -r ${SCA_TMP_FILE} ]; then rm -f %{_localstatedir}/ruleset/sca/* || true for sca_file in $(cat ${SCA_TMP_FILE}); do if [ -f ${SCA_BASE_DIR}/${sca_file} ]; then mv ${SCA_BASE_DIR}/${sca_file} %{_localstatedir}/ruleset/sca fi done fi # Set the proper selinux context if ([ "X${DIST_NAME}" = "Xrhel" ] || [ "X${DIST_NAME}" = "Xcentos" ] || [ "X${DIST_NAME}" = "XCentOS" ]) && [ "${DIST_VER}" == "5" ]; then if command -v getenforce > /dev/null 2>&1; then if [ $(getenforce) != "Disabled" ]; then chcon -t textrel_shlib_t %{_localstatedir}/lib/libwazuhext.so chcon -t textrel_shlib_t %{_localstatedir}/lib/libwazuhshared.so fi fi else # Add the SELinux policy if command -v getenforce > /dev/null 2>&1 && command -v semodule > /dev/null 2>&1; then if [ $(getenforce) != "Disabled" ]; then semodule -i %{_localstatedir}/var/selinux/wazuh.pp semodule -e wazuh fi fi fi # Restore ossec.conf permissions after upgrading chmod 0660 %{_localstatedir}/etc/ossec.conf # Remove old ossec user and group if exists and change ownwership of files if getent group ossec > /dev/null 2>&1; then find %{_localstatedir}/ -group ossec -user root -exec chown root:wazuh {} \; > /dev/null 2>&1 || true if getent passwd ossec > /dev/null 2>&1; then find %{_localstatedir}/ -group ossec -user ossec -exec chown wazuh:wazuh {} \; > /dev/null 2>&1 || true userdel ossec > /dev/null 2>&1 fi if getent passwd ossecm > /dev/null 2>&1; then find %{_localstatedir}/ -group ossec -user ossecm -exec chown wazuh:wazuh {} \; > /dev/null 2>&1 || true userdel ossecm > /dev/null 2>&1 fi if getent passwd ossecr > /dev/null 2>&1; then find %{_localstatedir}/ -group ossec -user ossecr -exec chown wazuh:wazuh {} \; > /dev/null 2>&1 || true userdel ossecr > /dev/null 2>&1 fi if grep -q ossec /etc/group; then groupdel ossec > /dev/null 2>&1 fi fi %preun if [ $1 = 0 ]; then # Stop the services before uninstall the package # Check for systemd if command -v systemctl > /dev/null 2>&1 && systemctl > /dev/null 2>&1 && systemctl is-active --quiet wazuh-agent > /dev/null 2>&1; then systemctl stop wazuh-agent.service > /dev/null 2>&1 # Check for SysV elif command -v service > /dev/null 2>&1 && service wazuh-agent status 2>/dev/null | grep "is running" > /dev/null 2>&1; then service wazuh-agent stop > /dev/null 2>&1 fi %{_localstatedir}/bin/wazuh-control stop > /dev/null 2>&1 # Remove the SELinux policy if command -v getenforce > /dev/null 2>&1 && command -v semodule > /dev/null 2>&1; then if [ $(getenforce) != "Disabled" ]; then if (semodule -l | grep wazuh > /dev/null); then semodule -r wazuh > /dev/null fi fi fi # Remove the service file for SUSE hosts if [ -f /etc/os-release ]; then sles=$(grep "\"sles" /etc/os-release) elif [ -f /etc/SuSE-release ]; then sles=$(grep "SUSE Linux Enterprise Server" /etc/SuSE-release) fi if [ ! -z "$sles" ]; then rm -f /etc/init.d/wazuh-agent fi # Remove SCA files rm -f %{_localstatedir}/ruleset/sca/* fi %triggerin -- glibc [ -r %{_sysconfdir}/localtime ] && cp -fpL %{_sysconfdir}/localtime %{_localstatedir}/etc chown root:wazuh %{_localstatedir}/etc/localtime chmod 0640 %{_localstatedir}/etc/localtime %postun # If the package is been uninstalled if [ $1 = 0 ];then # Remove the wazuh user if it exists if getent passwd wazuh > /dev/null 2>&1; then userdel wazuh >/dev/null 2>&1 fi # Remove the wazuh group if it exists if command -v getent > /dev/null 2>&1 && getent group wazuh > /dev/null 2>&1; then groupdel wazuh >/dev/null 2>&1 elif getent group wazuh > /dev/null 2>&1; then groupdel wazuh >/dev/null 2>&1 fi # Remove lingering folders and files rm -rf %{_localstatedir}/etc/shared/ rm -rf %{_localstatedir}/queue/ rm -rf %{_localstatedir}/var/ rm -rf %{_localstatedir}/bin/ rm -rf %{_localstatedir}/logs/ rm -rf %{_localstatedir}/backup/ rm -rf %{_localstatedir}/ruleset/ rm -rf %{_localstatedir}/tmp fi # posttrans code is the last thing executed in a install/upgrade %posttrans if [ -f %{_sysconfdir}/systemd/system/wazuh-agent.service ]; then rm -rf %{_sysconfdir}/systemd/system/wazuh-agent.service systemctl daemon-reload > /dev/null 2>&1 fi if [ -f %{_localstatedir}/tmp/wazuh.restart ]; then rm -f %{_localstatedir}/tmp/wazuh.restart if command -v systemctl > /dev/null 2>&1 && systemctl > /dev/null 2>&1 ; then systemctl daemon-reload > /dev/null 2>&1 systemctl restart wazuh-agent.service > /dev/null 2>&1 elif command -v service > /dev/null 2>&1; then service wazuh-agent restart > /dev/null 2>&1 else %{_localstatedir}/bin/wazuh-control restart > /dev/null 2>&1 fi fi if [ -d %{_localstatedir}/logs/ossec ]; then rm -rf %{_localstatedir}/logs/ossec/ fi if [ -d %{_localstatedir}/queue/ossec ]; then rm -rf %{_localstatedir}/queue/ossec/ fi if [ -f %{_sysconfdir}/ossec-init.conf ]; then rm -f %{_sysconfdir}/ossec-init.conf rm -f %{_localstatedir}/etc/ossec-init.conf fi %clean rm -fr %{buildroot} %files %defattr(-,root,root) %config(missingok) %{_initrddir}/wazuh-agent %attr(640, root, wazuh) %verify(not md5 size mtime) %ghost %{_sysconfdir}/ossec-init.conf /usr/lib/systemd/system/wazuh-agent.service %dir %attr(750, root, wazuh) %{_localstatedir} %attr(750, root, wazuh) %{_localstatedir}/agentless %dir %attr(770, root, wazuh) %{_localstatedir}/.ssh %dir %attr(750, root, wazuh) %{_localstatedir}/active-response %dir %attr(750, root, wazuh) %{_localstatedir}/active-response/bin %attr(750, root, wazuh) %{_localstatedir}/active-response/bin/* %dir %attr(750, root, root) %{_localstatedir}/bin %attr(750, root, root) %{_localstatedir}/bin/* %dir %attr(750, root, wazuh) %{_localstatedir}/backup %dir %attr(770, wazuh, wazuh) %{_localstatedir}/etc %attr(640, root, wazuh) %config(noreplace) %{_localstatedir}/etc/client.keys %attr(640, root, wazuh) %{_localstatedir}/etc/internal_options* %attr(640, root, wazuh) %{_localstatedir}/etc/localtime %attr(640, root, wazuh) %config(noreplace) %{_localstatedir}/etc/local_internal_options.conf %attr(660, root, wazuh) %config(noreplace) %{_localstatedir}/etc/ossec.conf %attr(640, root, wazuh) %{_localstatedir}/etc/wpk_root.pem %dir %attr(770, root, wazuh) %{_localstatedir}/etc/shared %attr(660, root, wazuh) %config(missingok,noreplace) %{_localstatedir}/etc/shared/* %dir %attr(750, root, wazuh) %{_localstatedir}/lib %attr(750, root, wazuh) %{_localstatedir}/lib/* %dir %attr(770, wazuh, wazuh) %{_localstatedir}/logs %attr(660, wazuh, wazuh) %ghost %{_localstatedir}/logs/active-responses.log %attr(660, root, wazuh) %ghost %{_localstatedir}/logs/ossec.log %attr(660, root, wazuh) %ghost %{_localstatedir}/logs/ossec.json %dir %attr(750, wazuh, wazuh) %{_localstatedir}/logs/wazuh %dir %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files %dir %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/add_localfiles.sh %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/gen_ossec.sh %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/generic/* %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/centos/* %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/rhel/* %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/sles/* %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/etc/templates/config/suse/* %attr(750, root, root) %config(missingok) %{_localstatedir}/packages_files/agent_installation_scripts/src/* %dir %attr(750, root, wazuh) %{_localstatedir}/queue %dir %attr(770, wazuh, wazuh) %{_localstatedir}/queue/sockets %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/diff %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/fim %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/fim/db %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/syscollector %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/syscollector/db %attr(640, root, wazuh) %{_localstatedir}/queue/syscollector/norm_config.json %dir %attr(770, wazuh, wazuh) %{_localstatedir}/queue/alerts %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/rids %dir %attr(750, wazuh, wazuh) %{_localstatedir}/queue/logcollector %dir %attr(750, root, wazuh) %{_localstatedir}/ruleset/ %dir %attr(750, root, wazuh) %{_localstatedir}/ruleset/sca %attr(750, root, wazuh) %{_localstatedir}/lib/libdbsync.so %attr(750, root, wazuh) %{_localstatedir}/lib/librsync.so %attr(750, root, wazuh) %{_localstatedir}/lib/libsyscollector.so %attr(750, root, wazuh) %{_localstatedir}/lib/libsysinfo.so %attr(750, root, wazuh) %{_localstatedir}/lib/libstdc++.so.6 %attr(750, root, wazuh) %{_localstatedir}/lib/libgcc_s.so.1 %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/generic %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/generic/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/1 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/1/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/2 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amzn/2/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/sca.files %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/5 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/5/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/6 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/6/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/7 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/7/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/8 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/centos/8/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/sca.files %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/5 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/5/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/6 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/6/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/7 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/7/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/8 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/8/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/9 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/rhel/9/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/sca.files %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/11 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/11/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/12 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/12/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/15 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/sles/15/* %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/sca.files %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/11 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/11/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/12 %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/suse/12/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amazon %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/amazon/* %dir %attr(750, wazuh, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora %attr(640, root, wazuh) %config(missingok) %{_localstatedir}/tmp/sca-%{version}-%{release}-tmp/fedora/* %dir %attr(1770, root, wazuh) %{_localstatedir}/tmp %dir %attr(750, root, wazuh) %{_localstatedir}/var %dir %attr(770, root, wazuh) %{_localstatedir}/var/incoming %dir %attr(770, root, wazuh) %{_localstatedir}/var/run %dir %attr(770, root, wazuh) %{_localstatedir}/var/selinux %attr(640, root, wazuh) %{_localstatedir}/var/selinux/* %dir %attr(770, root, wazuh) %{_localstatedir}/var/upgrade %dir %attr(770, root, wazuh) %{_localstatedir}/var/wodles %dir %attr(750, root, wazuh) %{_localstatedir}/wodles %attr(750, root, wazuh) %{_localstatedir}/wodles/* %dir %attr(750, root, wazuh) %{_localstatedir}/wodles/aws %attr(750, root, wazuh) %{_localstatedir}/wodles/aws/* %dir %attr(750, root, wazuh) %{_localstatedir}/wodles/azure %attr(750, root, wazuh) %{_localstatedir}/wodles/azure/* %dir %attr(750, root, wazuh) %{_localstatedir}/wodles/docker %attr(750, root, wazuh) %{_localstatedir}/wodles/docker/* %dir %attr(750, root, wazuh) %{_localstatedir}/wodles/gcloud %attr(750, root, wazuh) %{_localstatedir}/wodles/gcloud/* %changelog * Mon Jul 10 2023 support - 4.4.5 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-5.html * Tue Jun 13 2023 support - 4.4.4 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-4.html * Thu May 25 2023 support - 4.4.3 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-3.html * Mon May 08 2023 support - 4.4.2 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-2.html * Mon Apr 24 2023 support - 4.3.11 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3.11.html * Mon Apr 17 2023 support - 4.4.1 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-1.html * Wed Jan 18 2023 support - 4.4.0 - More info: https://documentation.wazuh.com/current/release-notes/release-4-4-0.html * Thu Nov 10 2022 support - 4.3.10 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-10.html * Mon Oct 03 2022 support - 4.3.9 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-9.html * Wed Sep 21 2022 support - 3.13.6 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-6.html * Mon Sep 19 2022 support - 4.3.8 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-8.html * Wed Aug 24 2022 support - 3.13.5 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-5.html * Mon Aug 08 2022 support - 4.3.7 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-7.html * Thu Jul 07 2022 support - 4.3.6 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-6.html * Wed Jun 29 2022 support - 4.3.5 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-5.html * Tue Jun 07 2022 support - 4.3.4 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-4.html * Tue May 31 2022 support - 4.3.3 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-3.html * Mon May 30 2022 support - 4.3.2 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-2.html * Mon May 30 2022 support - 3.13.4 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-4.html * Sun May 29 2022 support - 4.2.7 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-7.html * Wed May 18 2022 support - 4.3.1 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-1.html * Thu May 05 2022 support - 4.3.0 - More info: https://documentation.wazuh.com/current/release-notes/release-4-3-0.html * Fri Mar 25 2022 support - 4.2.6 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-6.html * Mon Nov 15 2021 support - 4.2.5 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-5.html * Thu Oct 21 2021 support - 4.2.4 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-4.html * Wed Oct 06 2021 support - 4.2.3 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-3.html * Tue Sep 28 2021 support - 4.2.2 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-2.html * Sat Sep 25 2021 support - 4.2.1 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-1.html * Mon Apr 26 2021 support - 4.2.0 - More info: https://documentation.wazuh.com/current/release-notes/release-4-2-0.html * Sat Apr 24 2021 support - 3.13.3 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-3.html * Thu Apr 22 2021 support - 4.1.5 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-5.html * Mon Mar 29 2021 support - 4.1.4 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-4.html * Sat Mar 20 2021 support - 4.1.3 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-3.html * Mon Mar 08 2021 support - 4.1.2 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-2.html * Fri Mar 05 2021 support - 4.1.1 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-1.html * Tue Jan 19 2021 support - 4.1.0 - More info: https://documentation.wazuh.com/current/release-notes/release-4-1-0.html * Mon Nov 30 2020 support - 4.0.3 - More info: https://documentation.wazuh.com/current/release-notes/release-4-0-3.html * Mon Nov 23 2020 support - 4.0.2 - More info: https://documentation.wazuh.com/current/release-notes/release-4-0-2.html * Sat Oct 31 2020 support - 4.0.1 - More info: https://documentation.wazuh.com/current/release-notes/release-4-0-1.html * Mon Oct 19 2020 support - 4.0.0 - More info: https://documentation.wazuh.com/current/release-notes/release-4-0-0.html * Fri Aug 21 2020 support - 3.13.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-2.html * Tue Jul 14 2020 support - 3.13.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-1.html * Mon Jun 29 2020 support - 3.13.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-13-0.html * Wed May 13 2020 support - 3.12.3 - More info: https://documentation.wazuh.com/current/release-notes/release-3-12-3.html * Thu Apr 9 2020 support - 3.12.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-12-2.html * Wed Apr 8 2020 support - 3.12.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-12-1.html * Wed Mar 25 2020 support - 3.12.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-12-0.html * Thu Feb 24 2020 support - 3.11.4 - More info: https://documentation.wazuh.com/current/release-notes/release-3-11-4.html * Wed Jan 22 2020 support - 3.11.3 - More info: https://documentation.wazuh.com/current/release-notes/release-3-11-3.html * Tue Jan 7 2020 support - 3.11.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-11-2.html * Thu Dec 26 2019 support - 3.11.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-11-1.html * Mon Oct 7 2019 support - 3.11.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-11-0.html * Mon Sep 23 2019 support - 3.10.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-10-2.html * Thu Sep 19 2019 support - 3.10.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-10-1.html * Mon Aug 26 2019 support - 3.10.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-10-0.html * Mon Aug 8 2019 support - 3.9.5 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-5.html * Mon Jul 12 2019 support - 3.9.4 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-4.html * Mon Jul 02 2019 support - 3.9.3 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-3.html * Mon Jun 11 2019 support - 3.9.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-2.html * Mon Jun 01 2019 support - 3.9.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-1.html * Mon Feb 25 2019 support - 3.9.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-9-0.html * Wed Jan 30 2019 support - 3.8.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-8-2.html * Thu Jan 24 2019 support - 3.8.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-8-1.html * Fri Jan 18 2019 support - 3.8.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-8-0.html * Wed Nov 7 2018 support - 3.7.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-7-0.html * Mon Sep 10 2018 support - 3.6.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-6-1.html * Fri Sep 7 2018 support - 3.6.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-6-0.html * Wed Jul 25 2018 support - 3.5.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-5-0.html * Wed Jul 11 2018 support - 3.4.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-4-0.html * Mon Jun 18 2018 support - 3.3.1 - More info: https://documentation.wazuh.com/current/release-notes/release-3-3-1.html * Mon Jun 11 2018 support - 3.3.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-3-0.html * Wed May 30 2018 support - 3.2.4 - More info: https://documentation.wazuh.com/current/release-notes/release-3-2-4.html * Thu May 10 2018 support - 3.2.3 - More info: https://documentation.wazuh.com/current/release-notes/release-3-2-3.html * Mon Apr 09 2018 support - 3.2.2 - More info: https://documentation.wazuh.com/current/release-notes/release-3-2-2.html * Wed Feb 21 2018 support - 3.2.1 - More info: https://documentation.wazuh.com/current/release-notes/rerlease-3-2-1.html * Wed Feb 07 2018 support - 3.2.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-2-0.html * Thu Dec 21 2017 support - 3.1.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-1-0.html * Mon Nov 06 2017 support - 3.0.0 - More info: https://documentation.wazuh.com/current/release-notes/release-3-0-0.html * Tue Jun 06 2017 support - 2.0.1 - Changed random data generator for a secure OS-provided generator. - Changed Windows installer file name (depending on version). - Linux distro detection using standard os-release file. - Changed some URLs to documentation. - Disable synchronization with SQLite databases for Syscheck by default. - Minor changes at Rootcheck formatter for JSON alerts. - Added debugging messages to Integrator logs. - Show agent ID when possible on logs about incorrectly formatted messages. - Use default maximum inotify event queue size. - Show remote IP on encoding format errors when unencrypting messages. - Fix permissions in agent-info folder - Fix permissions in rids folder. * Fri Apr 21 2017 Jose Luis Ruiz - 2.0 - Changed random data generator for a secure OS-provided generator. - Changed Windows installer file name (depending on version). - Linux distro detection using standard os-release file. - Changed some URLs to documentation. - Disable synchronization with SQLite databases for Syscheck by default. - Minor changes at Rootcheck formatter for JSON alerts. - Added debugging messages to Integrator logs. - Show agent ID when possible on logs about incorrectly formatted messages. - Use default maximum inotify event queue size. - Show remote IP on encoding format errors when unencrypting messages. - Fixed resource leaks at rules configuration parsing. - Fixed memory leaks at rules parser. - Fixed memory leaks at XML decoders parser. - Fixed TOCTOU condition when removing directories recursively. - Fixed insecure temporary file creation for old POSIX specifications. - Fixed missing agentless devices identification at JSON alerts. - Fixed FIM timestamp and file name issue at SQLite database. - Fixed cryptographic context acquirement on Windows agents. - Fixed debug mode for Analysisd. - Fixed bad exclusion of BTRFS filesystem by Rootcheck. - Fixed compile errors on macOS. - Fixed option -V for Integrator. - Exclude symbolic links to directories when sending FIM diffs (by Stephan Joerrens). - Fixed daemon list for service reloading at wazuh-control. - Fixed socket waiting issue on Windows agents. - Fixed PCI_DSS definitions grouping issue at Rootcheck controls.