Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(ossec): run "disconnected submissions" checks from systemd timers; report on saved output #7009

Merged
merged 2 commits into from
Oct 18, 2023
Merged

fix(ossec): run "disconnected submissions" checks from systemd timers; report on saved output #7009

merged 2 commits into from
Oct 18, 2023

Commits on Oct 18, 2023

  1. fix(ossec): run "disconnected submissions" checks from systemd timers… 

    …; report on saved output

This should prevent OSSEC from having to sudo to run these commands
directly, which adds noise to "/var/log/auth.log" and thus OSSEC's own
daily "Successful Logins" report.
    @cfm
    cfm committed Oct 18, 2023
    Configuration menu
    Copy the full SHA
    5111fa2 View commit details
    Browse the repository at this point in the history

  2. test(ossec): test alerts from "disconnected submissions" checks 

    "manage.py check-disconnected-fs-{db,fs}-submissions" has output whether
or not there are disconnected submissions, so OSSEC matches on the
actual output, not just the presence of it.  Here we test both cases for
both checks, since they have different output.
    @cfm
    cfm committed Oct 18, 2023
    Configuration menu
    Copy the full SHA
    154b0bc View commit details
    Browse the repository at this point in the history