diff --git a/security/wazuh-agent/Makefile b/security/wazuh-agent/Makefile index 6f156d3d3..990ce80eb 100644 --- a/security/wazuh-agent/Makefile +++ b/security/wazuh-agent/Makefile @@ -1,6 +1,5 @@ PLUGIN_NAME= wazuh-agent -PLUGIN_VERSION= 1.2 -PLUGIN_REVISION= 3 +PLUGIN_VERSION= 1.3 PLUGIN_COMMENT= Agent for the open source security platform Wazuh PLUGIN_DEPENDS= wazuh-agent PLUGIN_MAINTAINER= ad@opnsense.org diff --git a/security/wazuh-agent/pkg-descr b/security/wazuh-agent/pkg-descr index 7a6dd7666..2a7e397c2 100644 --- a/security/wazuh-agent/pkg-descr +++ b/security/wazuh-agent/pkg-descr @@ -8,6 +8,11 @@ solution. Plugin Changelog ================ +1.3 + +* Fix active response duplicate key causing false aborts (contributed by Michael Bedworth) +* Add repeated_offenders config and fix template issues (contributed by Michael Bedworth) + 1.2 * Implement options to change server ports (contributed by 999eagle) diff --git a/security/wazuh-agent/src/opnsense/mvc/app/models/OPNsense/WazuhAgent/WazuhAgent.xml b/security/wazuh-agent/src/opnsense/mvc/app/models/OPNsense/WazuhAgent/WazuhAgent.xml index 9657b91ba..43c66aa0b 100644 --- a/security/wazuh-agent/src/opnsense/mvc/app/models/OPNsense/WazuhAgent/WazuhAgent.xml +++ b/security/wazuh-agent/src/opnsense/mvc/app/models/OPNsense/WazuhAgent/WazuhAgent.xml @@ -13,7 +13,6 @@ Y - N N @@ -58,9 +57,7 @@ Y - N Y - filterlog,openvpn,unbound,audit,sshd syslog list applications /tmp/syslog_applications.json 20 @@ -110,12 +107,10 @@ - N - N /^([0-9]+)(,[0-9]+)*$/ - Enter comma-separated timeout values in minutes (e.g., 30,60,120,240) + Enter comma-separated timeout values in minutes (e.g., 30,60,120,240). diff --git a/security/wazuh-agent/src/opnsense/scripts/wazuh/opnsense-fw b/security/wazuh-agent/src/opnsense/scripts/wazuh/opnsense-fw index a13439c2e..3eefe8154 100755 --- a/security/wazuh-agent/src/opnsense/scripts/wazuh/opnsense-fw +++ b/security/wazuh-agent/src/opnsense/scripts/wazuh/opnsense-fw @@ -122,7 +122,7 @@ def main(params): "command": "check_keys", "parameters":{ unique_key = "%s-%s" % (event['parameters']['alert']['rule']['id'], srcip) - "keys": [unique_key] + "keys": [unique_key] } })) sys.stdout.flush()