forked from wazuh/wazuh-docker
448. Rename users and groups according to new Wazuh naming standard
This commit is contained in:
+12
-12
@@ -16,22 +16,22 @@ file:
|
|||||||
/var/ossec/etc/lists/audit-keys:
|
/var/ossec/etc/lists/audit-keys:
|
||||||
exists: true
|
exists: true
|
||||||
mode: "0660"
|
mode: "0660"
|
||||||
owner: ossec
|
owner: wazuh
|
||||||
group: ossec
|
group: wazuh
|
||||||
filetype: file
|
filetype: file
|
||||||
contains: []
|
contains: []
|
||||||
/var/ossec/etc/ossec.conf:
|
/var/ossec/etc/ossec.conf:
|
||||||
exists: true
|
exists: true
|
||||||
mode: "0660"
|
mode: "0660"
|
||||||
owner: root
|
owner: root
|
||||||
group: ossec
|
group: wazuh
|
||||||
filetype: file
|
filetype: file
|
||||||
contains: []
|
contains: []
|
||||||
/var/ossec/etc/rules/local_rules.xml:
|
/var/ossec/etc/rules/local_rules.xml:
|
||||||
exists: true
|
exists: true
|
||||||
mode: "0660"
|
mode: "0660"
|
||||||
owner: ossec
|
owner: wazuh
|
||||||
group: ossec
|
group: wazuh
|
||||||
filetype: file
|
filetype: file
|
||||||
contains: []
|
contains: []
|
||||||
/var/ossec/etc/sslmanager.cert:
|
/var/ossec/etc/sslmanager.cert:
|
||||||
@@ -71,26 +71,26 @@ port:
|
|||||||
ip:
|
ip:
|
||||||
- 0.0.0.0
|
- 0.0.0.0
|
||||||
user:
|
user:
|
||||||
ossec:
|
wazuh:
|
||||||
exists: true
|
exists: true
|
||||||
groups:
|
groups:
|
||||||
- ossec
|
- wazuh
|
||||||
home: /var/ossec
|
home: /var/ossec
|
||||||
shell: /sbin/nologin
|
shell: /sbin/nologin
|
||||||
ossecm:
|
wazuh:
|
||||||
exists: true
|
exists: true
|
||||||
groups:
|
groups:
|
||||||
- ossec
|
- wazuh
|
||||||
home: /var/ossec
|
home: /var/ossec
|
||||||
shell: /sbin/nologin
|
shell: /sbin/nologin
|
||||||
ossecr:
|
wazuh:
|
||||||
exists: true
|
exists: true
|
||||||
groups:
|
groups:
|
||||||
- ossec
|
- wazuh
|
||||||
home: /var/ossec
|
home: /var/ossec
|
||||||
shell: /sbin/nologin
|
shell: /sbin/nologin
|
||||||
group:
|
group:
|
||||||
ossec:
|
wazuh:
|
||||||
exists: true
|
exists: true
|
||||||
process:
|
process:
|
||||||
filebeat:
|
filebeat:
|
||||||
|
|||||||
@@ -6,7 +6,7 @@
|
|||||||
<logall_json>no</logall_json>
|
<logall_json>no</logall_json>
|
||||||
<email_notification>no</email_notification>
|
<email_notification>no</email_notification>
|
||||||
<smtp_server>smtp.example.wazuh.com</smtp_server>
|
<smtp_server>smtp.example.wazuh.com</smtp_server>
|
||||||
<email_from>ossecm@example.wazuh.com</email_from>
|
<email_from>wazuh@example.wazuh.com</email_from>
|
||||||
<email_to>recipient@example.wazuh.com</email_to>
|
<email_to>recipient@example.wazuh.com</email_to>
|
||||||
<email_maxperhour>12</email_maxperhour>
|
<email_maxperhour>12</email_maxperhour>
|
||||||
<email_log_source>alerts.log</email_log_source>
|
<email_log_source>alerts.log</email_log_source>
|
||||||
|
|||||||
@@ -6,7 +6,7 @@
|
|||||||
<logall_json>no</logall_json>
|
<logall_json>no</logall_json>
|
||||||
<email_notification>no</email_notification>
|
<email_notification>no</email_notification>
|
||||||
<smtp_server>smtp.example.wazuh.com</smtp_server>
|
<smtp_server>smtp.example.wazuh.com</smtp_server>
|
||||||
<email_from>ossecm@example.wazuh.com</email_from>
|
<email_from>wazuh@example.wazuh.com</email_from>
|
||||||
<email_to>recipient@example.wazuh.com</email_to>
|
<email_to>recipient@example.wazuh.com</email_to>
|
||||||
<email_maxperhour>12</email_maxperhour>
|
<email_maxperhour>12</email_maxperhour>
|
||||||
<email_log_source>alerts.log</email_log_source>
|
<email_log_source>alerts.log</email_log_source>
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ ADD https://raw.githubusercontent.com/wazuh/wazuh/$TEMPLATE_VERSION/extensions/e
|
|||||||
RUN chmod go-w /etc/filebeat/wazuh-template.json
|
RUN chmod go-w /etc/filebeat/wazuh-template.json
|
||||||
|
|
||||||
COPY config/etc/ /etc/
|
COPY config/etc/ /etc/
|
||||||
COPY --chown=root:ossec config/create_user.py /var/ossec/framework/scripts/create_user.py
|
COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py
|
||||||
|
|
||||||
# Prepare permanent data
|
# Prepare permanent data
|
||||||
# Sync calls are due to https://github.com/docker/docker/issues/9547
|
# Sync calls are due to https://github.com/docker/docker/issues/9547
|
||||||
|
|||||||
@@ -36,11 +36,11 @@ function_wazuh_migration(){
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/ossec.conf /var/ossec/etc/ossec.conf
|
\cp -f /wazuh-migration/data/etc/ossec.conf /var/ossec/etc/ossec.conf
|
||||||
chown root:ossec /var/ossec/etc/ossec.conf
|
chown root:wazuh /var/ossec/etc/ossec.conf
|
||||||
chmod 640 /var/ossec/etc/ossec.conf
|
chmod 640 /var/ossec/etc/ossec.conf
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/client.keys /var/ossec/etc/client.keys
|
\cp -f /wazuh-migration/data/etc/client.keys /var/ossec/etc/client.keys
|
||||||
chown ossec:ossec /var/ossec/etc/client.keys
|
chown wazuh:wazuh /var/ossec/etc/client.keys
|
||||||
chmod 640 /var/ossec/etc/client.keys
|
chmod 640 /var/ossec/etc/client.keys
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/sslmanager.cert /var/ossec/etc/sslmanager.cert
|
\cp -f /wazuh-migration/data/etc/sslmanager.cert /var/ossec/etc/sslmanager.cert
|
||||||
@@ -49,25 +49,25 @@ function_wazuh_migration(){
|
|||||||
chmod 640 /var/ossec/etc/sslmanager.cert /var/ossec/etc/sslmanager.key
|
chmod 640 /var/ossec/etc/sslmanager.cert /var/ossec/etc/sslmanager.key
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/shared/default/agent.conf /var/ossec/etc/shared/default/agent.conf
|
\cp -f /wazuh-migration/data/etc/shared/default/agent.conf /var/ossec/etc/shared/default/agent.conf
|
||||||
chown ossec:ossec /var/ossec/etc/shared/default/agent.conf
|
chown wazuh:wazuh /var/ossec/etc/shared/default/agent.conf
|
||||||
chmod 660 /var/ossec/etc/shared/default/agent.conf
|
chmod 660 /var/ossec/etc/shared/default/agent.conf
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/decoders/* /var/ossec/etc/decoders/
|
\cp -f /wazuh-migration/data/etc/decoders/* /var/ossec/etc/decoders/
|
||||||
chown ossec:ossec /var/ossec/etc/decoders/*
|
chown wazuh:wazuh /var/ossec/etc/decoders/*
|
||||||
chmod 660 /var/ossec/etc/decoders/*
|
chmod 660 /var/ossec/etc/decoders/*
|
||||||
|
|
||||||
\cp -f /wazuh-migration/data/etc/rules/* /var/ossec/etc/rules/
|
\cp -f /wazuh-migration/data/etc/rules/* /var/ossec/etc/rules/
|
||||||
chown ossec:ossec /var/ossec/etc/rules/*
|
chown wazuh:wazuh /var/ossec/etc/rules/*
|
||||||
chmod 660 /var/ossec/etc/rules/*
|
chmod 660 /var/ossec/etc/rules/*
|
||||||
|
|
||||||
if [ -e /wazuh-migration/data/agentless/.passlist ]; then
|
if [ -e /wazuh-migration/data/agentless/.passlist ]; then
|
||||||
\cp -f /wazuh-migration/data/agentless/.passlist /var/ossec/agentless/.passlist
|
\cp -f /wazuh-migration/data/agentless/.passlist /var/ossec/agentless/.passlist
|
||||||
chown root:ossec /var/ossec/agentless/.passlist
|
chown root:wazuh /var/ossec/agentless/.passlist
|
||||||
chmod 640 /var/ossec/agentless/.passlist
|
chmod 640 /var/ossec/agentless/.passlist
|
||||||
fi
|
fi
|
||||||
|
|
||||||
\cp -f /wazuh-migration/global.db /var/ossec/queue/db/global.db
|
\cp -f /wazuh-migration/global.db /var/ossec/queue/db/global.db
|
||||||
chown ossec:ossec /var/ossec/queue/db/global.db
|
chown wazuh:wazuh /var/ossec/queue/db/global.db
|
||||||
chmod 640 /var/ossec/queue/db/global.db
|
chmod 640 /var/ossec/queue/db/global.db
|
||||||
|
|
||||||
# mark volume as migrated
|
# mark volume as migrated
|
||||||
|
|||||||
Reference in New Issue
Block a user