@comment PKG_FORMAT_REVISION:1.1
@name ossec-hids-server-2.7
@comment ORIGIN:security/ossec-hids-server
@cwd /usr/local
@conflicts ossec-hids-client-[0-9]*
@conflicts ossec-hids-local-[0-9]*
@exec echo "===> Creating users and/or groups."
@exec if ! /usr/sbin/pw groupshow ossec >/dev/null 2>&1; then  echo "Creating group 'ossec' with gid '966'.";  /usr/sbin/pw groupadd ossec -g 966; else echo "Using existing group 'ossec'."; fi
@exec if ! /usr/sbin/pw usershow ossec >/dev/null 2>&1; then  echo "Creating user 'ossec' with uid '966'.";  /usr/sbin/pw useradd ossec -u 966 -g 966  -c "OSSEC user" -d /usr/local/ossec-hids -s /usr/sbin/nologin;  else echo "Using existing user 'ossec'."; fi
@exec install -d -g 966 -o 966 /usr/local/ossec-hids
@exec if ! /usr/sbin/pw usershow ossecm >/dev/null 2>&1; then  echo "Creating user 'ossecm' with uid '967'.";  /usr/sbin/pw useradd ossecm -u 967 -g 966  -c "OSSEC mail user" -d /usr/local/ossec-hids -s /usr/sbin/nologin;  else echo "Using existing user 'ossecm'."; fi
@exec install -d -g 966 -o 967 /usr/local/ossec-hids
@exec if ! /usr/sbin/pw usershow ossecr >/dev/null 2>&1; then  echo "Creating user 'ossecr' with uid '968'.";  /usr/sbin/pw useradd ossecr -u 968 -g 966  -c "OSSEC rem user" -d /usr/local/ossec-hids -s /usr/sbin/nologin;  else echo "Using existing user 'ossecr'."; fi
@exec install -d -g 966 -o 968 /usr/local/ossec-hids
ossec-hids/active-response/bin/disable-account.sh
@comment MD5:6696d5e6b1464d63569507419a7b3582
ossec-hids/active-response/bin/firewall-drop.sh
@comment MD5:864a83b1b4fc2b9ae476a079e8683cac
ossec-hids/active-response/bin/host-deny.sh
@comment MD5:929ed2da6ddbfecb3807e0591972344c
ossec-hids/active-response/bin/ipfw_mac.sh
@comment MD5:8464865c22e50d7abe9cf28ebb754627
ossec-hids/active-response/bin/ipfw.sh
@comment MD5:33ab5d196695ec8839f76ffaaa6f27be
ossec-hids/active-response/bin/ossec-tweeter.sh
@comment MD5:4cbab6aeb963b00fec11fb2c4367ff51
ossec-hids/active-response/bin/pf.sh
@comment MD5:28f2b9e45d7ae8a08043ef1df207853e
ossec-hids/active-response/bin/restart-ossec.sh
@comment MD5:54265163fd59969371516ae7cf4024ee
ossec-hids/active-response/bin/route-null.sh
@comment MD5:8038838ce614839b69607b0c8d3dcd95
ossec-hids/bin/agent_control
@comment MD5:ca3215c048b2a8ec490b932fc293b495
ossec-hids/bin/clear_stats
@comment MD5:8021717b7bcd32c376b3341c43ab1802
ossec-hids/bin/list_agents
@comment MD5:1b3aae33f51bc3c77930acb89732a621
ossec-hids/bin/manage_agents
@comment MD5:136b0fd5d3ecfbda57fb4f8566310739
ossec-hids/bin/ossec-agentd
@comment MD5:a012d020d4a96a159db293d07a46cbd1
ossec-hids/bin/ossec-agentlessd
@comment MD5:19c0e697c32f593d29f85b25dd972e38
ossec-hids/bin/ossec-analysisd
@comment MD5:e7641a84959a850109dd5d8fc2a93f02
ossec-hids/bin/ossec-authd
@comment MD5:f35ed4072b9280383803af50a2ce0df8
ossec-hids/bin/ossec-control
@comment MD5:aca2705e0c37aad8b2efd54054906267
ossec-hids/bin/ossec-csyslogd
@comment MD5:46493846157a1737300f8c790d9398e5
ossec-hids/bin/ossec-dbd
@comment MD5:b4f00610f695a0ccb82a95d6c270d876
ossec-hids/bin/ossec-execd
@comment MD5:fd405071f93a55f6b13ddbd40cc4bb07
ossec-hids/bin/ossec-logcollector
@comment MD5:f66aa17f06816ee0e4ddc8720d1b76cf
ossec-hids/bin/ossec-logtest
@comment MD5:044944d4dd62bf6f26ddc2db0a1f317b
ossec-hids/bin/ossec-maild
@comment MD5:474283c70f80f4c904ea27315bc25298
ossec-hids/bin/ossec-makelists
@comment MD5:21aa0bdf9b2a8a1b6d4a283513189161
ossec-hids/bin/ossec-monitord
@comment MD5:d48de02b56928f34dab29b1a56fc0290
ossec-hids/bin/ossec-regex
@comment MD5:ef35fce90cd1d56af40ae6a94c641af4
ossec-hids/bin/ossec-remoted
@comment MD5:1bda676449688d07290ad0b7c200b960
ossec-hids/bin/ossec-reportd
@comment MD5:05e809ff9dbbfb213b5661936fb9ec6d
ossec-hids/bin/ossec-syscheckd
@comment MD5:cf998aacff007e70fc049e60b872f105
ossec-hids/bin/rootcheck_control
@comment MD5:f18f161c388207bb9868f89efb4ede81
ossec-hids/bin/syscheck_control
@comment MD5:69c13f3d0125a96846f9f399f368ac18
ossec-hids/bin/syscheck_update
@comment MD5:c81550d9209f6d487c6312651068449a
ossec-hids/bin/util.sh
@comment MD5:7d7de85e9bcd3f82b037560f4f1fd5d3
ossec-hids/bin/verify-agent-conf
@comment MD5:dbf04cf9c5dad346ea600968e0f4b9c5
ossec-hids/etc/decoder.xml
@comment MD5:93a895355f87016ccc0c474cd49ff498
ossec-hids/etc/internal_options.conf
@comment MD5:d183af1ab64cefdbda623e84cf17a923
@unexec if cmp -s %D/ossec-hids/etc/ossec.conf %D/ossec-hids/etc/ossec.conf.sample; then rm -f %D/ossec-hids/etc/ossec.conf; fi
ossec-hids/etc/ossec.conf.sample
@comment MD5:cdce3b3fc7e01f4e5fd00d3b9692cec8
ossec-hids/etc/shared/rootkit_files.txt
@comment MD5:5c51f04b4565ac6e07e21f4575ea92e5
ossec-hids/etc/shared/rootkit_trojans.txt
@comment MD5:ab2ae25a24ec158abe31da041453eae0
ossec-hids/etc/shared/system_audit_rcl.txt
@comment MD5:b2854f89cc479bc3bf6628540577325f
ossec-hids/etc/shared/win_applications_rcl.txt
@comment MD5:e2bc03551a96939585f775fac9ad2a25
ossec-hids/etc/shared/win_audit_rcl.txt
@comment MD5:29193f547b8d09e8928067dede683f7d
ossec-hids/etc/shared/win_malware_rcl.txt
@comment MD5:1476437188176eef2c4afb5caf4f59e1
ossec-hids/etc/shared/cis_debian_linux_rcl.txt
@comment MD5:376e1e4e12a7687a6bba1f071b61ac85
ossec-hids/etc/shared/cis_rhel_linux_rcl.txt
@comment MD5:113e95df1b094cc470f33a2db87ded2a
ossec-hids/etc/shared/cis_rhel5_linux_rcl.txt
@comment MD5:920866cd05b4c71b5f2f816477d3d725
@unexec if test ! -s %D/ossec-hids/logs/ossec.log; then rm -f %D/ossec-hids/logs/ossec.log; fi
@unexec if test ! -s %D/ossec-hids/logs/active-responses.log; then rm -f %D/ossec-hids/logs/active-responses.log; fi
ossec-hids/rules/apache_rules.xml
@comment MD5:319d7b320091c285ac44d6bb53555843
ossec-hids/rules/arpwatch_rules.xml
@comment MD5:453cf7fef0d15e0235e8810952a79641
ossec-hids/rules/asterisk_rules.xml
@comment MD5:82f8418393407bf6a20ec8c6481b0b9b
ossec-hids/rules/attack_rules.xml
@comment MD5:457a501a81783fa2628323fb95893cc9
ossec-hids/rules/bro-ids_rules.xml
@comment MD5:83c8d4836fb9792c112a9d194568c1f1
ossec-hids/rules/cimserver_rules.xml
@comment MD5:6b5e4a2c2db3bb11a5484542cdc19335
ossec-hids/rules/cisco-ios_rules.xml
@comment MD5:08a8fe27f0a473cc52332a5bbbaa5c48
ossec-hids/rules/clam_av_rules.xml
@comment MD5:08898a5bb515ce41f078b9f1a506efbf
ossec-hids/rules/courier_rules.xml
@comment MD5:241a2216fd53ac49f4c5fbf3339c5a8c
ossec-hids/rules/dovecot_rules.xml
@comment MD5:0764facc6f231e6a0cfbd6984174fc1c
ossec-hids/rules/dropbear_rules.xml
@comment MD5:edddf90729d1cded25c4ee803ee2a31f
ossec-hids/rules/firewall_rules.xml
@comment MD5:ec419a3314ee54458c675f46045945cc
ossec-hids/rules/ftpd_rules.xml
@comment MD5:713c2fa70a1522db77bbbf1a5ad0a02f
ossec-hids/rules/hordeimp_rules.xml
@comment MD5:60786f05c15b410a10c02e26748552fc
ossec-hids/rules/ids_rules.xml
@comment MD5:c3f69db682835a9c6d340dcb84c71bac
ossec-hids/rules/imapd_rules.xml
@comment MD5:85fa200afdbc14dc8370b1fedb84cb1e
ossec-hids/rules/local_rules.xml
@comment MD5:db3e32f8ec7370f38385bf8023b9e504
ossec-hids/rules/mailscanner_rules.xml
@comment MD5:d70ee2bd62203ab160220905d17ae2ed
ossec-hids/rules/mcafee_av_rules.xml
@comment MD5:372c2345d862659866496e0c02b60d7c
ossec-hids/rules/ms-exchange_rules.xml
@comment MD5:3a7ed0f22cd277ef710809a82508a44d
ossec-hids/rules/ms-se_rules.xml
@comment MD5:f575340799a2703874a0ec111490a6fb
ossec-hids/rules/ms_dhcp_rules.xml
@comment MD5:4573b0c0a55e592b04935d1e4cbae468
ossec-hids/rules/ms_ftpd_rules.xml
@comment MD5:143b815660a94c95af7f6053c77f4344
ossec-hids/rules/msauth_rules.xml
@comment MD5:7ba12409b69b07ad429515127f2178d5
ossec-hids/rules/mysql_rules.xml
@comment MD5:633104b7fa31f154559afb9806a8c90d
ossec-hids/rules/named_rules.xml
@comment MD5:36c38ee12618028f0cba07be445ab164
ossec-hids/rules/netscreenfw_rules.xml
@comment MD5:7779823664d19cfcc201f8574aa0ebf7
ossec-hids/rules/nginx_rules.xml
@comment MD5:9b8698b8a1b4e13a3a68959f14be6dca
ossec-hids/rules/openbsd_rules.xml
@comment MD5:2678a25a1bd8de6ce1d4ae25911bbbec
ossec-hids/rules/ossec_rules.xml
@comment MD5:ce88349db6df890dc45e89bc8d0ac7d6
ossec-hids/rules/pam_rules.xml
@comment MD5:c85b80123e2680a24e74b29308b0ec19
ossec-hids/rules/php_rules.xml
@comment MD5:e77da584db6c13d934d098d2353ac80e
ossec-hids/rules/pix_rules.xml
@comment MD5:501da0094cc3d4ba62c65ed3b353549d
ossec-hids/rules/policy_rules.xml
@comment MD5:f5e4afd5cd4cca4e9c4328467a0d3111
ossec-hids/rules/postfix_rules.xml
@comment MD5:0ca3bb5580adffe03f70f685cb948b0e
ossec-hids/rules/postgresql_rules.xml
@comment MD5:f960bd18b365a98b6ffe64f3801a5d15
ossec-hids/rules/proftpd_rules.xml
@comment MD5:64cea36eaee15371cd07ebe261f27d55
ossec-hids/rules/pure-ftpd_rules.xml
@comment MD5:ca54b976bfb683d0c6c87bd0ebbf5950
ossec-hids/rules/racoon_rules.xml
@comment MD5:223c7d61ec6a954fc5738a8794e87a2d
ossec-hids/rules/roundcube_rules.xml
@comment MD5:33c684b01af1993b73f176481ae0ec0f
ossec-hids/rules/rules_config.xml
@comment MD5:12479fdb28410e4227b63f5c4542ad86
ossec-hids/rules/sendmail_rules.xml
@comment MD5:41f2374aec69aa5c4cefb26f7028dee7
ossec-hids/rules/smbd_rules.xml
@comment MD5:ba0f553a0315b988468431a518ecaea8
ossec-hids/rules/solaris_bsm_rules.xml
@comment MD5:c7d6a9819a0114fd3723da037ca72941
ossec-hids/rules/sonicwall_rules.xml
@comment MD5:91acc4c37a82a24917dd49a0234935d9
ossec-hids/rules/spamd_rules.xml
@comment MD5:266dfbc74658e58209e905c8d3aa265c
ossec-hids/rules/squid_rules.xml
@comment MD5:ca00f4c574a557007a67e665edbdb1b4
ossec-hids/rules/sshd_rules.xml
@comment MD5:168639ae043949ee45d74aa124330805
ossec-hids/rules/symantec-av_rules.xml
@comment MD5:cec4c84ab0c472e23fac03c800976191
ossec-hids/rules/symantec-ws_rules.xml
@comment MD5:4469b35f943baa308e6f24a6414e448a
ossec-hids/rules/syslog_rules.xml
@comment MD5:c74d1e4d6e5165ea3f1496876671d014
ossec-hids/rules/telnetd_rules.xml
@comment MD5:70a2d32b8e8d58e6d268174084300d09
ossec-hids/rules/trend-osce_rules.xml
@comment MD5:ebf5b0b9057cefefabc50748d5ca82d5
ossec-hids/rules/vmpop3d_rules.xml
@comment MD5:248a9698a23b03848be4641c1e6aebb0
ossec-hids/rules/vmware_rules.xml
@comment MD5:c517617b906c22556d34136a4994a529
ossec-hids/rules/vpn_concentrator_rules.xml
@comment MD5:fe8aa8e3dd3d60a9247b8faade030ea3
ossec-hids/rules/vpopmail_rules.xml
@comment MD5:812d2a049e381d2816493904ee4cc61b
ossec-hids/rules/vsftpd_rules.xml
@comment MD5:efb95fd6017a26023f522bfdd855195b
ossec-hids/rules/web_appsec_rules.xml
@comment MD5:5e376c7e1ad1efbb66ca1f02205999ce
ossec-hids/rules/web_rules.xml
@comment MD5:8ed7b5e01c4a9e479f84cea72d640c61
ossec-hids/rules/wordpress_rules.xml
@comment MD5:4d72b512251ac20bb9b55a41a1c5cae9
ossec-hids/rules/zeus_rules.xml
@comment MD5:d4a4116cd4bb720352855b93fbd1905a
ossec-hids/agentless/main.exp
@comment MD5:8de9f76b53e3d931ca91b5b30e93e30d
ossec-hids/agentless/register_host.sh
@comment MD5:3837e5b595795be4a4b7ab8a686419fc
ossec-hids/agentless/ssh.exp
@comment MD5:151469d3db7b9984f283b3db84bd4805
ossec-hids/agentless/ssh_asa-fwsmconfig_diff
@comment MD5:c4686eb10052796a091cc2631cc26066
ossec-hids/agentless/ssh_foundry_diff
@comment MD5:37bedae6ed6bb5f7b4a81b05d111110c
ossec-hids/agentless/ssh_generic_diff
@comment MD5:01998b783ae3e744910ca5fa48284e15
ossec-hids/agentless/ssh_integrity_check_bsd
@comment MD5:607f15a31477667a929b39fe93fd0ef3
ossec-hids/agentless/ssh_integrity_check_linux
@comment MD5:5153a546ff0b249f5e5fad7336864753
ossec-hids/agentless/ssh_nopass.exp
@comment MD5:3029b1c8b4452e9220e1dd0d5e3d1146
ossec-hids/agentless/ssh_pixconfig_diff
@comment MD5:e970334d6ed40cec19ed160e0edd9503
ossec-hids/agentless/sshlogin.exp
@comment MD5:afd8198e717c69712a39abf88d737bfd
ossec-hids/agentless/su.exp
@comment MD5:f96dec8e2bbbbba81547d8a8ca5f1f4e
@unexec rmdir "%D/ossec-hids/.ssh" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/active-response/bin" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/active-response" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/agentless" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/bin" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/etc/shared" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/etc" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/logs/alerts" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/logs/archives" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/logs/firewall" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/logs" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/agent-info" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/agentless" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/alerts" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/diff" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/fts" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/ossec" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/rids" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/rootcheck" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue/syscheck" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/queue" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/rules" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/stats/hourly-average" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/stats/totals" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/stats/weekly-average" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/stats" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/tmp" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/var/run" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids/var" 2>/dev/null || true
@unexec rmdir "%D/ossec-hids" 2>/dev/null || true
@comment OPTIONS:+DOCS -MYSQL -PGSQL
@unexec if /usr/sbin/pw usershow ossec >/dev/null 2>&1; then  echo "==> You should manually remove the \"ossec\" user. "; fi
@unexec if /usr/sbin/pw usershow ossecm >/dev/null 2>&1; then  echo "==> You should manually remove the \"ossecm\" user. "; fi
@unexec if /usr/sbin/pw usershow ossecr >/dev/null 2>&1; then  echo "==> You should manually remove the \"ossecr\" user. "; fi
@cwd /usr/local
etc/rc.d/ossec-hids
@comment MD5:64cf1b1a80991597ec3af9eea1898326
@comment Build details:  ||||
share/doc/ossec-hids/BUGS
@comment MD5:91b86021d59a20a938e1d6b37e3b063e
share/doc/ossec-hids/CONFIG
@comment MD5:720f107f783d46ec5082b15bc2ca9b17
share/doc/ossec-hids/CONTRIBUTORS
@comment MD5:ad30e648a3612118828584c156f64ed9
share/doc/ossec-hids/INSTALL
@comment MD5:3e6cfdf3cfeb08d5ffb5efd15054ce7e
share/doc/ossec-hids/LICENSE
@comment MD5:a47381144c276bf61f8354414bc3411f
share/doc/ossec-hids/README
@comment MD5:66465af409340d41e752674b908760e9
@dirrm share/doc/ossec-hids
@display +DISPLAY
