summaryrefslogtreecommitdiff
path: root/security/wazuh-manager/files/patch-etc_ossec-server.conf
diff options
context:
space:
mode:
Diffstat (limited to 'security/wazuh-manager/files/patch-etc_ossec-server.conf')
-rw-r--r--security/wazuh-manager/files/patch-etc_ossec-server.conf47
1 files changed, 41 insertions, 6 deletions
diff --git a/security/wazuh-manager/files/patch-etc_ossec-server.conf b/security/wazuh-manager/files/patch-etc_ossec-server.conf
index e80a18d10064..2000faef3d49 100644
--- a/security/wazuh-manager/files/patch-etc_ossec-server.conf
+++ b/security/wazuh-manager/files/patch-etc_ossec-server.conf
@@ -1,6 +1,33 @@
---- etc/ossec-server.conf 2024-05-10 18:10:43.842257000 -0500
-+++ etc/ossec-server.conf 2024-05-10 18:15:26.471699000 -0500
-@@ -28,7 +28,8 @@
+--- etc/ossec-server.conf 2025-09-23 06:59:40.000000000 -0700
++++ etc/ossec-server.conf 2025-10-16 17:18:34.635446000 -0700
+@@ -20,6 +20,26 @@
+ <agents_disconnection_alert_time>0</agents_disconnection_alert_time>
+ </global>
+
++ <vulnerability-detection>
++ <enabled>no</enabled>
++ <index-status>yes</index-status>
++ <feed-update-interval>60m</feed-update-interval>
++ </vulnerability-detection>
++
++ <indexer>
++ <enabled>no</enabled>
++ <hosts>
++ <host>https://127.0.0.1:9200</host>
++ </hosts>
++ <ssl>
++ <certificate_authorities>
++ <ca>/usr/local/etc/logstash/certs/root-ca.pem</ca>
++ </certificate_authorities>
++ <certificate>/usr/local/etc/logstash/certs/server1.pem</certificate>
++ <key>/usr/local/etc/logstash/certs/server1-key.pem</key>
++ </ssl>
++ </indexer>
++
+ <alerts>
+ <log_alert_level>3</log_alert_level>
+ <email_alert_level>12</email_alert_level>
+@@ -28,7 +48,8 @@
<remote>
<connection>secure</connection>
<port>1514</port>
@@ -10,7 +37,15 @@
</remote>
<!-- Policy monitoring -->
-@@ -200,7 +201,7 @@
+@@ -43,7 +64,6 @@
+
+ <system_audit>/var/ossec/etc/shared/system_audit_rcl.txt</system_audit>
+ <system_audit>/var/ossec/etc/shared/system_audit_ssh.txt</system_audit>
+- <system_audit>/var/ossec/etc/shared/cis_debian_linux_rcl.txt</system_audit>
+
+ <skip_nfs>yes</skip_nfs>
+ </rootcheck>
+@@ -200,7 +220,7 @@
<localfile>
<log_format>syslog</log_format>
@@ -19,7 +54,7 @@
</localfile>
<localfile>
-@@ -211,7 +212,7 @@
+@@ -211,7 +231,7 @@
<localfile>
<log_format>full_command</log_format>
@@ -28,7 +63,7 @@
<frequency>360</frequency>
</localfile>
-@@ -233,4 +234,32 @@
+@@ -236,4 +256,32 @@
<rule_dir>etc/rules</rule_dir>
</ruleset>