2 # postinst script for bind9-cn
4 # see: dh_installdeb(1)
8 # summary of how this script can be called:
9 # * <postinst> `configure' <most-recently-configured-version>
10 # * <old-postinst> `abort-upgrade' <new version>
11 # * <conflictor's-postinst> `abort-remove' `in-favour' <package>
13 # * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
14 # <failed-install-package> <version> `removing'
15 # <conflicting-package> <version>
16 # for details, see http://www.debian.org/doc/debian-policy/ or
17 # the debian-policy package
21 configure|reconfigure)
31 . /usr/share/carnet-tools/functions.sh
33 # get installation directory
34 . /etc/ossec-init.conf
35 if [ "X${DIRECTORY}" = "X" ]; then
36 DIRECTORY="/var/ossec"
40 if [ ! -d "$DIRECTORY/rules" ]; then
41 echo "CN: There is no "$DIRECTORY/rules" directory, exiting..."
42 echo "CN: Please reinstall ossec-hids package"
46 # find first available sid
47 local_rules="$DIRECTORY/rules/local_rules.xml"
52 /^[ \t]*<rule id="[[:digit:]]+" .*>/ {
61 if [ -e "$local_rules" ]; then
62 sid=$(awk "$script" "$local_rules")
65 # update local rules with our policy
66 if [ -e "$local_rules" ]; then
67 cp "$local_rules" "$local_rules.$$"
69 touch "$local_rules.$$"
72 cp-update --comment '<!--' --comment-end '-->' \
73 ossec-hids-cn "$local_rules.$$" <<EOF
74 <group name="syslog,errors,local">
75 <rule id="$(expr "$sid" + 1)" level="0">
78 <description>Events ignored</description>
81 <rule id="$(expr "$sid" + 1)" level="0">
83 <program_name>^sophie|^smartd</program_name>
84 <description>Events ignored</description>
88 <group name="syslog,postfix,local">
89 <rule id="$(expr "$sid" + 1)" level="0">
91 <description>Events ignored</description>
94 <rule id="$(expr "$sid" + 1)" level="0">
96 <description>Ignore blacklisted mail...</description>
100 cp_mv "$local_rules.$$" "$local_rules"
102 # and restart the service
103 if [ -x /usr/sbin/invoke-rc.d ]; then
104 invoke-rc.d ossec-hids restart
106 /etc/init.d/ossec-hids restart
109 # dh_installdeb will replace this with shell code automatically
110 # generated by other debhelper scripts.