system/ossec-agent: Added (Open Source Host-based IDS).

Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>

1 files changed, 29 insertions, 0 deletions

diff --git a/system/ossec-agent/doinst.sh b/system/ossec-agent/doinst.sh
new file mode 100644
index 0000000000..1f5ea03367
--- /dev/null
+++ b/system/ossec-agent/doinst.sh
@@ -0,0 +1,29 @@
+config() {
+  NEW="$1"
+  OLD="$(dirname $NEW)/$(basename $NEW .new)"
+  # If there's no config file by that name, mv it over:
+  if [ ! -r $OLD ]; then
+    mv $NEW $OLD
+  elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then
+    # toss the redundant copy
+    rm $NEW
+  fi
+  # Otherwise, we leave the .new copy for the admin to consider...
+}
+
+preserve_perms() {
+  NEW="$1"
+  OLD="$(dirname $NEW)/$(basename $NEW .new)"
+  if [ -e $OLD ]; then
+    cp -a $OLD ${NEW}.incoming
+    cat $NEW > ${NEW}.incoming
+    mv ${NEW}.incoming $NEW
+  fi
+  config $NEW
+}
+
+preserve_perms etc/rc.d/rc.ossec.new
+config etc/ossec-init.conf.new
+config etc/logrotate.d/ossec.new
+find var/ossec/etc -type f -name '*.new' \
+  | while read new ; do config $new ; done