HEX
Server: nginx/1.18.0
System: Linux hqnl0246134.online-vm.com 5.4.0-135-generic #152-Ubuntu SMP Wed Nov 23 20:19:22 UTC 2022 x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: phpinfo,disk_free_space,disk_total_space,diskfreespace,dl,exec,opcache_get_configuration,opcache_get_status,passthru,pclose,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_waitpid,pcntl_wait,pcntl_wexitstatus,pcntl_wifcontinued,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,show_source,system,exec,passthru,shell_exec,system,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source
$ pwd: /var/lib/dpkg/info/
Upload Files
File: /var/lib/dpkg/info/imunify360-ossec-server.postinst
#!/bin/sh
# postinst script for ossec-hids-server

set -e

sslkey=/var/ossec/etc/sslmanager.key
sslcert=/var/ossec/etc/sslmanager.cert

case "$1" in
    configure)
        /bin/systemctl daemon-reload >/dev/null 2>&1 || :

        sed -i -e 's/analysisd.stats_maxdiff=.*/analysisd.stats_maxdiff=25000/' /var/ossec/etc/internal_options.conf

        echo "TYPE=\"server\"" >> /etc/ossec-init.conf

        ln -sf ossec-server.sh /var/ossec/bin/ossec-control

        chmod 600 /etc/ossec-init.conf
        chmod 640 /var/ossec/etc/shared/agent.conf
        chmod 750 /var/ossec/logs/archives/
        chmod 770 /var/ossec/logs/alerts/
        chmod 750 /var/ossec/logs/firewall/
        chmod 755 /var/ossec/queue/agent-info/
        chmod 755 /var/ossec/queue/agentless/
        chmod 770 /var/ossec/queue/alerts/
        chmod 750 /var/ossec/queue/fts/
        chmod 755 /var/ossec/queue/rids/
        chmod 750 /var/ossec/queue/rootcheck/
        chmod 750 /var/ossec/queue/syscheck/
        chmod 550 /var/ossec/rules/
        chmod 750 /var/ossec/stats/
        chmod 550 /var/ossec/agentless/

        chown root:root /etc/ossec-init.conf
        chown ossec:ossec /var/ossec/etc/shared/agent.conf
        chown ossec:ossec /var/ossec/logs/archives
        chown ossec:ossec /var/ossec/logs/alerts
        chown ossec:ossec /var/ossec/logs/firewall
        chown ossecr:ossec /var/ossec/queue/agent-info
        chown ossec:ossec /var/ossec/queue/agentless
        chown ossec:ossec /var/ossec/queue/alerts
        chown ossec:ossec /var/ossec/queue/fts
        chown ossecr:ossec /var/ossec/queue/rids
        chown ossec:ossec /var/ossec/queue/rootcheck
        chown ossec:ossec /var/ossec/queue/syscheck
        chown root:ossec /var/ossec/rules
        chown ossec:ossec /var/ossec/stats
        chown root:ossec /var/ossec/agentless

        touch /var/ossec/logs/ossec.log
        chown ossec:ossec /var/ossec/logs/ossec.log

        touch /var/ossec/logs/active-responses.log
        chown ossec:ossec /var/ossec/logs/active-responses.log

        if [ ! -f ${sslkey} ] ; then
            /usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 2048 > ${sslkey} 2> /dev/null || :
        fi

        if [ ! -f ${sslcert} ] ; then
        cat << EOF | /usr/bin/openssl req -new -key ${sslkey} \
                 -x509 -days 1095 -set_serial $RANDOM \
                 -out ${sslcert} 2>/dev/null || :
--
AtomicState
AtomicCity
Atomicorp
AtomicOrganizationalUnit
${FQDN}
root@${FQDN}
EOF
        fi

        /var/ossec/bin/manage_agents -f /var/ossec/etc/agents >/dev/null 2>&1 || :

        /bin/systemctl enable ossec-hids.service >/dev/null
        /bin/systemctl start ossec-hids.service >/dev/null
    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >22
        exit 1
    ;;

esac

exit 0
@ Telegram