| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
| |
- cpython source package was updated to afc40bdd3dd71f343fd9016f6d8eebbacbd6587c
- Bump PORTREVISION
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Now, Wazuh source code is obtained from https://github.com/alonsobsd/wazuh-freebsd.
This repository includes all changes to run Wazuh Suite on FreeBSD. dtxdf and I
will maintain this repository in where will try to add all Wazuh features to
FreeBSD.
- wazuh-dashboards : Update version of opensearch to 2.19.4
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-14-2.html
Reviewed by: acm dtxdf
Tested by: acm dtxdf
|
| |
|
|
|
|
| |
- Now wazuh-manager can obtain users and groups information from host
- Fix start_time data to show correct datetime data from wazuh-dashboard processes option
- Bump PORTREVISION
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Fix issue when agent/manager connection use TCP instead of UDP.
(Thanks to dtxdf) [1]
- wazuh-manager settings use TCP by default
- FreeBSD sca,decoders and rules files were updated to fix some conflict
issues.
- Bump PORTREVISION
PR: 291040
Reported by: Paweł Krawczyk <p+freebsd at krvtz.net> [1]
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Traceback (most recent call last):
File "/var/ossec/framework/scripts/cluster_control.py", line 16, in <module>
import wazuh.core.cluster.cluster
File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/cluster/cluster.py", line 22, in <module>
from wazuh.core.cluster.utils import (
File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/cluster/utils.py", line 21, in <module>
from wazuh.core.configuration import get_ossec_conf
File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/configuration.py", line 23, in <module>
from wazuh.core.utils import cut_array, load_wazuh_xml, safe_move
File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/utils.py", line 32, in <module>
from api import configuration
File "/var/ossec/framework/python/lib/python3.11/site-packages/api/configuration.py", line 13, in <module>
from cryptography import x509
File "/var/ossec/framework/python/lib/python3.11/site-packages/cryptography/x509/__init__.py", line 7, in <module>
from cryptography.x509 import certificate_transparency, verification
File "/var/ossec/framework/python/lib/python3.11/site-packages/cryptography/x509/certificate_transparency.py", line 8, in <module>
from cryptography.hazmat.bindings._rust import x509 as rust_x509
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.
Approved by: acm@
|
| |
|
|
|
|
|
| |
Instead of returning UNKNOWN_VALUE, we can leverage the sysctl
'kern.hostuuid' so that users can uniquely identify their devices.
Approved by: acm@
|
| |
|
|
|
|
|
| |
When modulesd stops while decompressing the vulnerability detection database,
it accesses an uninitialized structure, causing a SIGSEGV.
Approved by: acm@
|
| |
|
|
| |
Reported by: pkg-fallout
|
| |
|
|
|
|
|
|
|
|
| |
- agent and manager: Avoid change permissions to local.sqlite file.
Now it uses read-only mode.
- manager: dos2unix to api.yaml file
- server: logstash8 was updated to 8.19.9 and it needs openjdk21+
- Bump PORTREVISION
Reported by: dtxdf
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Reimplement getPackages() using SQLite
getPackages() is a function used to get a set of information about
the packages installed on the system where the manager and agent
are installed. To obtain this information, pkg-query(8) was used;
however, prior to this commit, it was assumed that pkg(8) was
installed on the system, which could be wrong, especially on systems
such as jails, where pkg(8) is normally used from the host. With
this change, we leverage SQLite to read the pkg(8) database and
obtain information about the packages, which is also much more
efficient than executing a command. This also fixes the segmentation
fault inside jail in wazuh-modulesd when this condition occurs.
- Fix wazuh-apid when security.bsd.see_other_{u,g}ids=0
wazuh-apid checks the status of some daemons (or services) before
starting completely, and if it cannot detect the status, it may
mark the service as failed or stopped. When security.bsd.see_other_{u,g}ids
is enabled, apid cannot correctly detect the status of some daemons
running as root, such as wazuh-execd and wazuh-modulesd, so the API
will always return that it is DOWN. To work around this issue,
a small C program with the SUID bit set is used to check as root
if a process exists in /proc. This C program is used in the
wazuh.core.cluster.utils.get_manager_status() function for this
task.
- Fix package on 14-aarch64 and 16-aarch64
- Bump PORTREVISION
|
| |
|
|
| |
Reported by: pkg-fallout
|
| | |
|
| |
|
|
|
| |
PR: 291769
Reported by: Trond.Endrestol at ximalas.info
|
| | |
|
| | |
|
| |
|
|
| |
Reported by: pkg-fallout
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Python bundle update to 3.11.4
- wazuh-agent and wazuh-manager : Add support for 15-RELEASE and 16-CURRENT
- wazuh-agent and wazuh-manager : Improve FreeBSD system information functions
- wazuh-dashboards : Update version of opensearch to 2.19.3
- wazuh-manager: Update pkg-message with entries about vulnerability detector
and indexer connector configuration
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-14-1.html
PR: 290771 290782 291040
|
| |
|
|
|
| |
PR: 290782
Approved by: portmgr (blanket)
|
| |
|
|
|
|
|
|
|
| |
- Re-generate cache files with latest version of FreeBSD
- Update pyarrow whl to 20.0.0
- Bump PORTREVISION
PR: 288597
Reported by: Trond.Endrestol __at__ ximalas.info
|
| |
|
|
|
|
|
| |
... depending ports can't be built w/out updating.
PR: 287404
Differential Revision: https://reviews.freebsd.org/D50765
|
| |
|
|
| |
Reported by: pkg-fallout
|
| |
|
|
|
|
|
| |
- Fix extract issues on amd64/aarch64
- Update cpython bundle to 3.11.13
- Update whl cache files
- Bump PORTREVISION
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.
Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.
Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.
Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.
PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Update nlohmann-json bundle to 3.12.0. It fixes issues when
llvm >= 18 is used. [2]
- Add a missing dependency of numpy whl installed from wazuh-cache [1]
- Other minor changes
- Bump PORTREVISION
PR: 287003
Reported by: girgen [1]
Reported by: Trond Endrestøl [2]
|
| |
|
|
|
|
|
|
|
| |
- Update bundle python to 3.11.12
- Update opensearch dependency to 2.19.1
- Update opensearch-dashboards dependency to 2.19.1
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-12-0.html
Sponsored by: Entersekt
|
| |
|
|
|
| |
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-11-2.html
Sponsored by: Entersekt
|
| |
|
|
|
|
|
|
| |
- security/wazuh-manager: Remove bsolete patch
- security/wazuh-manager: Update http-request to 75384783d339a817b8d8f13f778051a878d642a6
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-11-1.html
Sponsored by: Entersekt
|
| |
|
|
|
|
|
|
| |
Any missed ports, feel free to bump.
Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
|
| |
|
|
|
|
|
| |
- Update py-pyarrow whl to 19.0.1
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-11-0.html
Sponsored by: Entersekt
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Fix issue when protocol is equal to udp46 or tcp46 on FreeBSD getPorts()
function
- Fix issue when process elapsed-times value is equal to hyphen on FreeBSD
getProcessesInfo() function
- Install librocksdb.so.8 library instead of librocksdb.so.8.3.2 one.
It avoids missing library issues
- Bump PORTREVISION
Sponsored by: Entersekt
|
| |
|
|
|
|
|
|
| |
- Update bundle python to 3.11.11
- Update opensearch dependency to 2.16.x
- Update opensearch-dashboards dependency to 2.16.x
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-10-1.html
|
| |
|
|
| |
Reported by: pkg-fallout
|
| |
|
|
|
|
|
|
|
| |
- Remove *.bak, *.orig, and tmp files installed from some whl files
- Fix issues with pkg-plist file
- Improve Makefile file
- Bump PORTREVISION
Reported by: pkg-fallout
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- wazuh-manager: Remove support for freebsd13-aarch64
- wazuh-manager: Cache files were generated from python3.11 instead of python3.10
- wazuh-manager: Remove obsolete patch files
- wazuh-dashboards : Use opensearch-dashboards230 instead of opensearch-dashboards210
ChangeLog at: https://github.com/wazuh/wazuh/releases
https://github.com/wazuh/wazuh-dashboard-plugins/releases
PR: 282160
Reported by: Ian Dickens <ian at south-border.com>
|
| |
|
|
|
|
|
|
| |
- Fix build/installation on aarch64
- Fix runtime issues on 14.x and 15.x because of openssl3 support [1]
PR: 279363
Reported by: girgen [1]
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
| |
- Fix wazuh-agent segment fault (agent and manager) [1]
- Improve configuration files (agent and manager)
- Update py-pyarrow into cache file to 15.0.2 (manager)
- Update cache files used by wazuh-manager.
- Other minor modifications
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-7-4.html
Obtained from: https://github.com/wazuh/wazuh/issues/23154 [1]
|
| |
|
|
| |
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-7-3.html
|
| |
|
|
|
|
|
|
|
|
| |
- Install FreeBSD rules, decoders and SCA files by default
- Strip python binary and so files
- Add devel/libffi and databases/arrow to LIB_DEPENDS
- Update pkg-message files
- Othe minor modifications
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-7-2.html
|
| |
|
|
|
|
| |
- Latest commit break wazuh-manager on extract
Reported by: pkg-fallout
Differential Revision: <https://reviews.freebsd.org/D42068>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
|
| |
|
|
|
|
| |
- Bump PORTREVISION. wazuh cache for 13-amd64 was repacked
Reported by: pkg-fallout
|
| |
|
|
|
|
|
|
| |
- Remove support for 12.x (EoL)
- Change some config files to sample files
- Fix syscollector issue when network port is equal to *
ChangeLog at: https://documentation.wazuh.com/current/release-notes/release-4-7-1.html
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix ssl=openssl build [1]
- Fix permissions of backup/db directory. Now backup are generated without
problems
- Add support for get ports info
- Add support for get processes info
- Add a better way for get memory info
- Add new decoders and rules files (https://github.com/alonsobsd/wazuh-freebsd)
- Update FreeBSD sca files (https://github.com/alonsobsd/wazuh-freebsd)
- Minor changes to SysInfo::getPackages function
- Another minor modifications
PR: 275008
Reported by: franco _at_ opnsense.org [1]
|