git: abfff1b87f26 - main - security/ossec-hids: update to 3.8.0

From: Philippe Audeoud <jadawin_at_FreeBSD.org>
Date: Mon, 17 Mar 2025 12:36:07 UTC
The branch main has been updated by jadawin:

URL: https://cgit.FreeBSD.org/ports/commit/?id=abfff1b87f264a148fd0bf4fe9830334035954dc

commit abfff1b87f264a148fd0bf4fe9830334035954dc
Author:     Philippe Audeoud <jadawin@FreeBSD.org>
AuthorDate: 2025-03-17 11:31:01 +0000
Commit:     Philippe Audeoud <jadawin@FreeBSD.org>
CommitDate: 2025-03-17 11:31:01 +0000

    security/ossec-hids: update to 3.8.0
    
    No additional binary changes to ossec-hids-* ports.
    
    Changes in configuration:
    - Changed default value of ossec_hids_fetch_connect_time from 40 to 60 seconds.
    - Limited PostgreSQL syscheck to config files only.
    
    PR:             285478
---
 .../ossec-hids-local-config/files/template-syscheck-pgsql.xml.in    | 4 ++--
 security/ossec-hids-local/Makefile                                  | 1 -
 security/ossec-hids-local/distinfo                                  | 6 +++---
 security/ossec-hids-local/files/ossec-hids.in                       | 4 ++--
 security/ossec-hids/version.mk                                      | 2 +-
 5 files changed, 8 insertions(+), 9 deletions(-)

diff --git a/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in b/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in
index f8f8ad802310..f0b845a14649 100644
--- a/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in
+++ b/security/ossec-hids-local-config/files/template-syscheck-pgsql.xml.in
@@ -2,7 +2,7 @@
 <template_config os="FreeBSD" profile="%%SYSCHECK_PGSQL_PROFILE%%">
 
   <syscheck>
-    <directories realtime="yes" check_all="yes" restrict=".conf">/var/db/postgres</directories>
+    <directories realtime="yes" check_all="yes" no_recurse="yes" restrict=".conf">/var/db/postgres</directories>
   </syscheck>
 
 </template_config>
@@ -10,7 +10,7 @@
 <template_config os="Linux" profile="%%SYSCHECK_PGSQL_PROFILE%%">
 
   <syscheck>
-    <directories realtime="yes" check_all="yes" restrict=".conf">/var/lib/postgresql</directories>
+    <directories realtime="yes" check_all="yes" no_recurse="yes" restrict=".conf">/var/lib/postgresql</directories>
   </syscheck>
 
 </template_config>
diff --git a/security/ossec-hids-local/Makefile b/security/ossec-hids-local/Makefile
index de07d873f3d4..2550813a7cd4 100644
--- a/security/ossec-hids-local/Makefile
+++ b/security/ossec-hids-local/Makefile
@@ -1,4 +1,3 @@
-PORTREVISION?=	1
 PKGNAMESUFFIX?=	-${OSSEC_TYPE}
 COMMENT?=	Security tool to monitor and check logs and intrusions - local (standalone) installation
 WWW=		https://ossec.github.io
diff --git a/security/ossec-hids-local/distinfo b/security/ossec-hids-local/distinfo
index 279c79e85dd1..acad9d581302 100644
--- a/security/ossec-hids-local/distinfo
+++ b/security/ossec-hids-local/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1656551293
-SHA256 (ossec-ossec-hids-3.7.0_GH0.tar.gz) = 23f5ede50f5de449db0a571fc453977f7079b4b47ce90b0ef31feed20df100e9
-SIZE (ossec-ossec-hids-3.7.0_GH0.tar.gz) = 2518737
+TIMESTAMP = 1740298126
+SHA256 (ossec-ossec-hids-3.8.0_GH0.tar.gz) = bd857a2dd7d0559ef59b4a9ec276f3a8ade6830f8aed257e8f4a62106cfe5f38
+SIZE (ossec-ossec-hids-3.8.0_GH0.tar.gz) = 2524057
diff --git a/security/ossec-hids-local/files/ossec-hids.in b/security/ossec-hids-local/files/ossec-hids.in
index 87783766b839..f7b173985f77 100644
--- a/security/ossec-hids-local/files/ossec-hids.in
+++ b/security/ossec-hids-local/files/ossec-hids.in
@@ -13,7 +13,7 @@
 #                                       Default: NO
 # ossec_hids_fetch_connect_time (int):  Time in seconds to wait for the download of the shared configuration to start.
 #                                       Used only by agent installation.
-#                                       Default: 40
+#                                       Default: 60
 # ossec_hids_fetch_read_time (int):     Time in seconds to wait for subsequent download chunks of the shared configuration.
 #                                       Used only by agent installation.
 #                                       Default: 10
@@ -28,7 +28,7 @@ load_rc_config $name
 : ${ossec_hids_enable="NO"}
 : ${ossec_hids_clear_log="NO"}
 : ${ossec_hids_clear_ar_log="NO"}
-: ${ossec_hids_fetch_connect_time=40}
+: ${ossec_hids_fetch_connect_time=60}
 : ${ossec_hids_fetch_read_time=10}
 
 ossec_type="%%OSSEC_TYPE%%"
diff --git a/security/ossec-hids/version.mk b/security/ossec-hids/version.mk
index 305273a7a832..47e2183aff89 100644
--- a/security/ossec-hids/version.mk
+++ b/security/ossec-hids/version.mk
@@ -1,5 +1,5 @@
 PORTNAME=	ossec-hids
-PORTVERSION=	3.7.0
+PORTVERSION=	3.8.0
 CATEGORIES=	security
 
 MAINTAINER=	dominik.lisiak@bemsoft.pl