Add a parameter ossec_rootcheck_ignore_list

Add parameters: - wazuh::manager::ossec_rootcheck_ignore_list - wazuh::agent::ossec_rootcheck_ignore_list
wazuh · Feb 14, 2020 · b6f3f86 · b6f3f86
1 parent 4885e89
commit b6f3f86
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 1 deletion.
diff --git a/manifests/agent.pp b/manifests/agent.pp
@@ -79,6 +79,7 @@
   $ossec_rootcheck_check_ports       = $wazuh::params_agent::ossec_rootcheck_check_ports,
   $ossec_rootcheck_check_if          = $wazuh::params_agent::ossec_rootcheck_check_if,
   $ossec_rootcheck_frequency         = $wazuh::params_agent::ossec_rootcheck_frequency,
+  $ossec_rootcheck_ignore_list       = $wazuh::params_agent::ossec_rootcheck_ignore_list,
   $ossec_rootcheck_rootkit_files     = $wazuh::params_agent::ossec_rootcheck_rootkit_files,
   $ossec_rootcheck_rootkit_trojans   = $wazuh::params_agent::ossec_rootcheck_rootkit_trojans,
   $ossec_rootcheck_skip_nfs          = $wazuh::params_agent::ossec_rootcheck_skip_nfs,

diff --git a/manifests/manager.pp b/manifests/manager.pp
@@ -73,6 +73,7 @@
       $ossec_rootcheck_check_ports          = $wazuh::params_manager::ossec_rootcheck_check_ports,
       $ossec_rootcheck_check_if             = $wazuh::params_manager::ossec_rootcheck_check_if,
       $ossec_rootcheck_frequency            = $wazuh::params_manager::ossec_rootcheck_frequency,
+      $ossec_rootcheck_ignore_list          = $wazuh::params_manager::ossec_rootcheck_ignore_list,
       $ossec_rootcheck_rootkit_files        = $wazuh::params_manager::ossec_rootcheck_rootkit_files,
       $ossec_rootcheck_rootkit_trojans      = $wazuh::params_manager::ossec_rootcheck_rootkit_trojans,
       $ossec_rootcheck_skip_nfs             = $wazuh::params_manager::ossec_rootcheck_skip_nfs,

diff --git a/manifests/params_agent.pp b/manifests/params_agent.pp
@@ -113,6 +113,7 @@
       $ossec_rootcheck_check_ports = 'yes'
       $ossec_rootcheck_check_if = 'yes'
       $ossec_rootcheck_frequency = 43200
+      $ossec_rootcheck_ignore_list = []
       $ossec_rootcheck_rootkit_files = '/var/ossec/etc/shared/rootkit_files.txt'
       $ossec_rootcheck_rootkit_trojans = '/var/ossec/etc/shared/rootkit_trojans.txt'
       $ossec_rootcheck_skip_nfs = 'yes'

diff --git a/manifests/params_manager.pp b/manifests/params_manager.pp
@@ -74,6 +74,7 @@
       $ossec_rootcheck_check_ports                     = 'yes'
       $ossec_rootcheck_check_if                        = 'yes'
       $ossec_rootcheck_frequency                       = 43200
+      $ossec_rootcheck_ignore_list                     = []
       $ossec_rootcheck_rootkit_files                   = '/var/ossec/etc/rootcheck/rootkit_files.txt'
       $ossec_rootcheck_rootkit_trojans                 = '/var/ossec/etc/rootcheck/rootkit_trojans.txt'
       $ossec_rootcheck_skip_nfs                        = 'yes'

diff --git a/templates/fragments/_rootcheck.erb b/templates/fragments/_rootcheck.erb
@@ -29,6 +29,11 @@
   <% if @ossec_rootcheck_frequency-%>
   <frequency><%= @ossec_rootcheck_frequency %></frequency>
   <%- end -%>
+  <%- if @ossec_rootcheck_ignore_list -%>
+    <%- @ossec_rootcheck_ignore_list.each do |ignore_element| -%>
+  <ignore><%= ignore_element %></ignore>
+    <%- end -%>
+  <%- end -%>
   <% if @ossec_rootcheck_rootkit_files-%>
   <rootkit_files><%= @ossec_rootcheck_rootkit_files %></rootkit_files>
   <%- end -%>
@@ -37,7 +42,7 @@
   <%- end -%>
   <% if @ossec_rootcheck_skip_nfs-%>
   <skip_nfs><%= @ossec_rootcheck_skip_nfs%></skip_nfs>
-  <%- end -%>  
+  <%- end -%>
 </rootcheck>
 <%- else -%>
 <!-- Rootcheck files (static) -->