#! /bin/sh set -e case "$1" in purge) # continue below ;; remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) exit 0 ;; *) echo "postrm called with unknown argument \`$1'" >&2 exit 1 ;; esac # cleanup leftovers rm -rf /var/ossec/etc /var/ossec/queue /var/ossec/stats # chown ossec mail directory back to root chown -Rh root:root /var/ossec # users and group names OSSEC_USER="ossec" OSSEC_USER_MAIL="ossecm" OSSEC_USER_EXEC="ossece" OSSEC_USER_REM="ossecr" OSSEC_GROUP="ossec" # delete users/groups if getent passwd $OSSEC_USER >/dev/null; then deluser $OSSEC_USER fi if getent passwd $OSSEC_USER_MAIL >/dev/null; then deluser $OSSEC_USER_MAIL fi if getent passwd $OSSEC_USER_EXEC >/dev/null; then deluser $OSSEC_USER_EXEC fi if getent passwd $OSSEC_USER_REM >/dev/null; then deluser $OSSEC_USER_REM fi if getent group $OSSEC_GROUP >/dev/null; then delgroup --quiet $OSSEC_GROUP fi # update system v init links update-rc.d -f ossec-hids remove # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0