Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
What's new
7
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Open sidebar
mirror
ossec-cookbook
Commits
99e3a657
Commit
99e3a657
authored
Mar 26, 2012
by
Andrew Crump
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
FC003: Check before using server-specific features
parent
237cbb89
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
14 additions
and
7 deletions
+14
-7
recipes/client.rb
recipes/client.rb
+5
-2
recipes/server.rb
recipes/server.rb
+9
-5
No files found.
recipes/client.rb
View file @
99e3a657
...
@@ -22,8 +22,11 @@ ossec_server = Array.new
...
@@ -22,8 +22,11 @@ ossec_server = Array.new
if
node
.
run_list
.
roles
.
include?
(
node
[
'ossec'
][
'server_role'
])
if
node
.
run_list
.
roles
.
include?
(
node
[
'ossec'
][
'server_role'
])
ossec_server
<<
node
[
'ipaddress'
]
ossec_server
<<
node
[
'ipaddress'
]
else
else
search
(
:node
,
"role:
#{
node
[
'ossec'
][
'server_role'
]
}
"
)
do
|
n
|
if
Chef
::
Config
[
:solo
]
ossec_server
<<
n
[
'ipaddress'
]
Chef
::
Log
.
warn
(
"This recipe uses search. Chef Solo does not support search."
)
search
(
:node
,
"role:
#{
node
[
'ossec'
][
'server_role'
]
}
"
)
do
|
n
|
ossec_server
<<
n
[
'ipaddress'
]
end
end
end
end
end
...
...
recipes/server.rb
View file @
99e3a657
...
@@ -28,14 +28,18 @@ agent_manager = "#{node['ossec']['user']['dir']}/bin/ossec-batch-manager.pl"
...
@@ -28,14 +28,18 @@ agent_manager = "#{node['ossec']['user']['dir']}/bin/ossec-batch-manager.pl"
ssh_hosts
=
Array
.
new
ssh_hosts
=
Array
.
new
search
(
:node
,
"ossec:[* TO *] NOT role:
#{
node
[
'ossec'
][
'server_role'
]
}
"
)
do
|
n
|
if
Chef
::
Config
[
:solo
]
Chef
::
Log
.
warn
(
"This recipe uses search. Chef Solo does not support search."
)
else
search
(
:node
,
"ossec:[* TO *] NOT role:
#{
node
[
'ossec'
][
'server_role'
]
}
"
)
do
|
n
|
ssh_hosts
<<
n
[
'ipaddress'
]
if
n
[
'keys'
]
ssh_hosts
<<
n
[
'ipaddress'
]
if
n
[
'keys'
]
execute
"
#{
agent_manager
}
-a --ip
#{
n
[
'ipaddress'
]
}
-n
#{
n
[
'hostname'
]
}
"
do
execute
"
#{
agent_manager
}
-a --ip
#{
n
[
'ipaddress'
]
}
-n
#{
n
[
'hostname'
]
}
"
do
not_if
"grep '
#{
n
[
'hostname'
]
}
#{
n
[
'ipaddress'
]
}
'
#{
node
[
'ossec'
][
'user'
][
'dir'
]
}
/etc/client.keys"
not_if
"grep '
#{
n
[
'hostname'
]
}
#{
n
[
'ipaddress'
]
}
'
#{
node
[
'ossec'
][
'user'
][
'dir'
]
}
/etc/client.keys"
end
end
end
end
end
template
"/usr/local/bin/dist-ossec-keys.sh"
do
template
"/usr/local/bin/dist-ossec-keys.sh"
do
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment