34 lines
1.5 KiB
Bash
Executable File
34 lines
1.5 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
# ─── Copie de la config custom (montée hors du volume wazuh_etc) ──────────────
|
|
CUSTOM=/wazuh-custom
|
|
|
|
cp "$CUSTOM/ossec.conf" /var/ossec/etc/ossec.conf
|
|
|
|
mkdir -p /var/ossec/etc/decoders /var/ossec/etc/rules /var/ossec/etc/lists
|
|
cp "$CUSTOM/decoders/"*.xml /var/ossec/etc/decoders/ 2>/dev/null || true
|
|
cp "$CUSTOM/rules/"*.xml /var/ossec/etc/rules/ 2>/dev/null || true
|
|
cp "$CUSTOM/lists/"* /var/ossec/etc/lists/ 2>/dev/null || true
|
|
|
|
# ─── Agent config partagée (distribuée aux agents) ───────────────────────────
|
|
if [ -f "$CUSTOM/agent.conf" ]; then
|
|
mkdir -p /var/ossec/etc/shared/default
|
|
cp "$CUSTOM/agent.conf" /var/ossec/etc/shared/default/agent.conf
|
|
fi
|
|
|
|
# ─── Active-response scripts ──────────────────────────────────────────────────
|
|
if [ -d "$CUSTOM/active-response" ]; then
|
|
for script in "$CUSTOM/active-response/"*.sh; do
|
|
[ -f "$script" ] || continue
|
|
dest="/var/ossec/active-response/bin/$(basename "$script")"
|
|
cp "$script" "$dest"
|
|
chmod 750 "$dest"
|
|
chown root:wazuh "$dest" 2>/dev/null || true
|
|
echo "Active-response déployé: $dest"
|
|
done
|
|
fi
|
|
|
|
# ─── Démarrage Wazuh Manager (entrypoint original) ────────────────────────────
|
|
exec /init
|