Skip to content

Latest commit

 

History

History
656 lines (382 loc) · 25 KB

CHANGELOG.md

File metadata and controls

656 lines (382 loc) · 25 KB
Raw

Change Log

All notable changes to this project will be documented in this file.

Wazuh Puppet v4.3.0

Added

  • Support to 4.3.0 Wazuh release.

Wazuh Puppet v4.2.4

Added

  • Support to 4.2.4 Wazuh release.

Wazuh Puppet v4.2.3

Added

  • Support to 4.2.3 Wazuh release.

Wazuh Puppet v4.2.2

Added

  • Support to 4.2.2 Wazuh release.

Fixed

  • Fixed a bug in the agent.pp manifest that prevented the Wazuh Agent from upgrading in Windows (#374)

Wazuh Puppet v4.2.1

Added

  • Support to 4.2.1 Wazuh release.

Wazuh Puppet v4.2.0

Added

  • Support to 4.2.0 Wazuh release.

Wazuh Puppet v4.1.5

Added

  • Support to 4.1.5 Wazuh release.

Wazuh Puppet v4.0.4

Added

Fixed

  • Idempotency improvements in Elasticsearch manifests (@neonmei) PR#313
  • Linting improvements work for Puppet Forge publishing (@Zenidd) PR#314
  • Idempotency improvements in Kibana manifests (@neonmei) PR#315
  • PDK validate improvements (@neonmei) PR#319
  • Fix warnings due to undefined variables (@Hexta) PR#331
  • Use manager_ossec.conf as render target for Integrations (@Zenidd) PR#327
  • Use manager_ossec.conf as render target for Reports (@Zenidd) PR#328
  • Remove manager-specific options for active response in agent manifest (@Zenidd) PR#332
  • Fix stdlib deprecation warnings related to validate_* functions (@Hexta) PR#334
  • Update target name in concat resources for manager_ossec.conf (@g3rhard) PR#341

Wazuh Puppet v4.0.3

Added

  • Update to Wazuh version 4.0.3

Fixed

  • Templates: update jvm.options template with version information (@neonmei) PR#310
  • Restart manager service after modifying agent_auth_password (@Fabian1976) PR#307

Wazuh Puppet v4.0.2

Added

  • Update to Wazuh version 4.0.2

Fixed

Wazuh Puppet v4.0.1

Added

  • Update to Wazuh version 4.0.1
  • Support for Wazuh v4 new features (@Zenidd) PR#300:
    • Agent autoenrollment
    • API RBAC

Wazuh Puppet v3.13.2

Added

  • Update to Wazuh version 3.13.2

  • wazuh-puppet tests on GitHub Actions (@Zenidd) PR#274

  • Support Open Distro for Elasticsearch deployments (@Zenidd) PR#285

Fixed

Wazuh Puppet v3.13.1_7.8.0

Added

  • Update to Wazuh version 3.13.1_7.8.0

Wazuh Puppet v3.13.0_7.7.1

Added

  • Update to Wazuh version 3.13.0_7.7.1
  • Add syscollector related config in Wazuh Agent manifest (@rshad) PR#241

Wazuh Puppet v3.12.3_7.6.2

Added

  • Update to Wazuh version 3.12.3_7.6.2
  • Add option for report files changes in syscheck (@Hexta) PR#212

Wazuh Puppet v3.12.2_7.6.2

Added

  • Update to Wazuh version 3.12.2_7.6.2

Wazuh Puppet v3.12.0_7.6.1

Added

  • Update to Wazuh version 3.12.0_7.6.1

  • Add a parameter ossec_rootcheck_ignore_list (@Hexta) PR#212

  • Add a parameter wazuh_api::manage_nodejs_package (@Hexta) PR#213

  • Upgrade to NodeJS v10 (@xr09) PR#230

  • Always treat $ossec_emailnotification as a boolean (@alanwevans) PR#229

  • Adapt active-response definition (@rshad) PR#234

Fixed

  • Fixes #215: Fix audit package name for Debian (@djmgit) PR#216

  • Fixes #227 : Add system_audit subsection in rootcheck (@djmgit) PR#228

  • Fixes #225 : Option to configure audit rules from this module itself (@djmgit) PR#226

  • Fixes #221 : No kern.log, auth.log, mail.log in default localfile config for Debian family (@rshad) Issue#221

Wazuh Puppet v3.11.4_7.6.1

Added

  • Update to Wazuh version 3.11.4_7.6.1

Wazuh Puppet v3.11.3_7.5.2

Added

  • Update to Wazuh version 3.11.3_7.5.2

  • Improved agent Windows config. and secondary fixes (@rshad) PR#205

Wazuh Puppet v3.11.2_7.5.1

Added

  • Update to Wazuh version 3.11.2_7.5.1

Fixed

Wazuh Puppet v3.11.1_7.5.1

Added

  • Update to Wazuh version 3.11.1_7.5.1

  • Adapt to new Wazuh API configuration (@jm404) PR#195

  • Some templates have been parametrized (@rshad) PR#187

Changed

  • Implemented Changes to make ossec.conf equivalent to the default version (@rshad) PR#190

Wazuh Puppet v3.11.0_7.5.1

Added

Fixed

Wazuh Puppet v3.10.2_7.3.2

Added

  • Update to Wazuh version 3.10.2_7.3.2

Wazuh Puppet v3.10.0_7.3.2

Added

Fixed

  • Fixes for Ossec email notifications' config (rshad) PR#150

Wazuh Puppet v3.9.5_7.2.1

Added

  • Update to Wazuh version 3.9.5_7.2.1

Fixed

Wazuh Puppet v3.9.4_7.2.0

Added

  • Update to Wazuh version 3.9.4_7.2.0

  • Added Filebeat module and adapted Elasticsearch IP (rshad) PR#144

  • Added Kitchen testing for Wazuh deployment with Puppet. (rshad) PR#139

  • Added Ubuntu as a recognized operating system to Puppet manifests. (rshad) PR#141

  • Wazuh Agent is now able to register and report to different IPs. (@jm404) PR#136

Fixed

  • Fixed integration when group is not specified. (TheoPoc) PR#142

Changed

  • Moved command and email_alert templates to templates/fragments. (rshad) PR#143

Wazuh Puppet v3.9.3_7.2.0

Added

  • Update to Wazuh version 3.9.3_7.2.0

Wazuh Puppet v3.9.2_7.1.1

Added

  • Update to Wazuh version 3.9.2_7.1.1

Wazuh Puppet v3.9.1_7.1.0

Added

Changed

Removed

  • Registration method export deleted due to security issues. (@jm404) #f77fe49
  • Eliminated inotify-tools . (@jm404) #628db1e
  • Deleted _common.erb fragment in order to give flexibility to Agent and Manager. (@jm404) #92114ea

[v3.9.1]

Added

  • Update to Wazuh version 3.9.1_6.8.0

[v3.9.0]

Added

  • Allow certificates to be defined by file path (#112)

Changed

  • Update to Wazuh version 3.9.0 (#118)

[v3.8.2]

Changed

  • Update to Wazuh version 3.8.2. (#107)

[v3.8.1]

Changed

  • Update to Wazuh version 3.8.1 (#104)

[v3.8.0]

Added

  • Feature/agent auth cert key (#98)
  • Install package even if repos are not managed by wazuh (#99)

Added

  • Updating params.pp and _common.erb so all the options of localfile can be used (#97)

[v3.7.2]

Added

  • Updating params.pp and _common.erb so all the options of localfile can be used (#97)

Fixed

  • Fixing process_list.erb performance (#94)
  • Update windows agent version (#96)

[v3.7.1]

Added

  • Add integration support. (#89)
  • Add support for who data. (#84)
  • Grouping agents. (#82)

Fixed

  • Fix firewall module and support excluding decoders and rules. (#81)

Changed

  • Updated metadata.json.
  • Changed addlog for command support. (#90)

v3.7.0-3701

Added

  • New repository management and content.
  • Add support for Wazuh 3.x. (#85)

Fixed

  • Fix username (puppet to puppetlabs). (#74)

Change Log old version.

2017-xx-xx [email protected] - 2.0.23

  • Fixed issue #18 with the pull request #17. (thanks @lemrouch)
  • Fixed issue #29 puppetlabs/apt version 4 onwards breaks the installation of wazuh server (thanks @rafaelfc-olx)
  • Adding support for changing ossec_server_protocol with the pull request #30 (thanks @rafaelfc-olx)
  • Managing wazuh-api alongside with wazuh-manager with the pull request #31 (thanks @rafaelfc-olx)
  • Preventing Duplicated declaration issues regarding apt-transport-https package with the pull request #32 (thanks @rafaelfc-olx)
  • Adding support for changing the client protocol and validating the manager by CA with the pull request #34 (thanks @rafaelfc-olx)
  • Configuring wazuh-api from puppet with the pull request #35 (thanks @rafaelfc-olx)
  • Adding notify_time and time-reconnect options to client config with the pull request #36 (thanks @rafaelfc-olx)
  • New wazuh-winagent-v2.1.1-1.exe added.
  • Profile name for Centos 7 is not _server, it's _common like RHEL7 with the pull request #38 (thanks @juliovalcarcel)
  • Verifying if @wodle_openscap_content is defined, fixed #45 and #46
  • Set the same file permissions than the installed package, fixed #41
  • Adding the ability to set "type" attribute for "ignore" tag, fixed #19
  • Adding support to OracleLinux, Fixed #43
  • Add an option for the agent/manager class to manage the firewall automatically with puppetlabs/firewall

2017-05-27 [email protected] - 2.0.22

  • Fixed issue #3. (Thanks for reporting it @ddholstad99)
  • Fixed issue #4. (Thanks for reporting it @elisiano)
  • Explicitly use the windows package provider pull request #11 (Thanks @damoxc)
  • Enable fedora 23/24/25 for pull request #9 (Thanks @ddholstad99)
  • Fix for issue Fix for #6 validate_cmd pull request #12 (Thanks @dakine1111)
  • Add $wodle_openscap_content parameter to server.pp pull request #12 (Thanks hex2a)
  • Added some changes in order to do this module compatible. (pull request #5 thanks elisano)

2017-04-24 Jose Luis Ruiz - 2.0.21

  • Fix apt deprecation warnings. (thanks @kdole)
  • Avoid warnings when storeconfigs are not available. (thanks @kdole)
  • Use default local_files setting. (thanks @kdole)
  • Making ossec server port configurable. (thanks @edge-records)
  • Allow custom agent configurations (thanks @ffleming)
  • Fixed issec #66 (thanks @thedawidbalut)
  • Adds options to control rootcheck feature. (thanks @netman2k)
  • Use puppet-selinux instead of jfryman-selinux (thanks @netman2k)
  • Allow custom ossec.conf in agent and server template (thanks @sam-wouters)
  • Fixed issue #71. (Thanks for reporting it @sc-chad)
  • Fixed issue #72. (Thanks for reporting it @sc-chad)
  • Clean code and added new OpenScap option (thanks @0x2A)
  • module refactored/adapted for wazuh 2.0 (thanks @0x2A)
  • New wazuh-agent-2.0.exe for Windows.

2016-12-08 Jose Luis Ruiz - 2.0.20

  • Fixed typo in the windows package, this type made the deploy fails under windows.

2016-12-08 Jose Luis Ruiz - 2.0.19

  • Compat with Older versions facter. (pull request #47 thanks @seefood)
  • Template paths as parameters. (pull request #48 thanks @seefood )
  • Client: allow configurable service_has_status, default to params. (pull request #51 thanks @josephholsten )
  • Added Yakketi to the supported distributions.
  • Modified activeresponse.erb to include <rules_id></rules_id> tags (pull request #56 thanks @MatthewRBruce)
  • Modified client.pp and server.pp to accept package versions as parameter. (pull request #57 thanks @MatthewRBruce)

2016-10-20 Jose Luis Ruiz - 2.0.18

  • Fixed 10_ossec.conf.erb template, "local_decoder" added to rules configuration

2016-10-18 Jose Luis Ruiz - 2.0.17

  • Fixed gpgkey path under CentOS and RHEL

2016-10-18 Jose Luis Ruiz - 2.0.16

  • Add local_decoder.xml and local_rules.xml templates

2016-10-15 Jose Luis Ruiz - 2.0.15

  • Add option to enable syslog output. (pull request #35 thanks @TravellingGUy )
  • Add Add Amazon Linux support. (pull request #37 thanks @seefood)
  • Hard-coded GPG key for RHEL-like systems. (pull request #37 thanks @tobowers)
  • Override package & service name for client installation. (pull request #43 thanks MrSecure)

2016-06-14 Jose Luis Ruiz - 2.0.14

  • Add prefilter to agent config. (pull request #32 thanks @cmblong )
  • Add function addlog to the agent. (issue #30 thanks @paul-cs)
  • Add the apt::key can set a proxy and the key add process could be done. (issue #34 thanks @drequena)

2016-06-14 Jose Luis Ruiz - 2.0.13

  • Adding xenial to the supported distributions.(pull request #31 thanks @stephen-kainos)

2016-05-04 Jose Luis Ruiz - 2.0.12

Jose Luis Ruiz [email protected]:

  • Add MariaDB support ( (pull reques #3 thanks @ialokin)
  • Permit admin to disable auto_ignore for files which change more than three times. (pull request #24 thanks @cmblong)
  • Change fqdn_rand(3000) to a variable to allow us to increase the number of available clients. (pull request #25 thanks @cmblong)
  • Can now set a minimal activeresponse entry containing just repeated_offenders by defining $ar_repeated_offenders in the wazuh::client. (pull request #26 thanks @ialokin)
  • Add variable to enable prefilter command. (pull request #27 thanks @cmblong)
  • Set service provider to redhat on Redhat systems. (pull request #28 thanks @cmblong))

2016-05-04 Jose Luis Ruiz - 2.0.11

Jose Luis Ruiz [email protected]:

  • Fix windows installation error in params. (pull request #20 thanks @cmblong)
  • Added support for repeated_offenders in activeresponse (pull request #21 thanks @ialokin)

2016-04-26 Jose Luis Ruiz - 2.0.10

Jose Luis Ruiz [email protected]:

  • Extra rules config to integrate Wazuh ruleset. (pull request #17 thanks @TravellingGUy)
  • Allow configuration of the email_maxperhour and email_idsname configuration items. (pull request #18 thanks @TravellingGUy)
  • Fix bug in client exported resources (pull request #19 thanks @scottcunningham)

2016-02-23 Jose Luis Ruiz - 2.0.9

Jose Luis Ruiz [email protected]:

  • Allow the agent identity to be modified. (pull request #10 thanks @damoxc)
  • prevent the agent-auth command being used. (pull request #11 thanks @damoxc)
  • Change log directory to only be readable by user and group. (pull request #12 thanks @damoxc)
  • Add the ability to configure a MySQL database with OSSEC server. (pull request #14 thanks @coreone)

2016-02-05 Jose Luis Ruiz - 2.0.8

Jose Luis Ruiz [email protected]:

  • Fix some typos with puppet-lint.

2016-02-05 Jose Luis Ruiz [email protected] - 2.0.7

Jose Luis Ruiz [email protected]:

  • Run agent-auth if client.keys doesn't exist an agent. (pull request #9 thanks @TravellingGuy)

2016-02-03 Jose Luis Ruiz [email protected] - 2.0.6

Jose Luis Ruiz [email protected]:

  • Add ability to manage epel repo to master/client configs (pull request #4 thanks @justicel)
  • The @path uses the puppet level path variable (pull request #5 thanks @justicel)
  • Allow whitelisting of IP addreses (thanks @chaordix)
  • Provides an option to tell the puppet module to not manage the client.keys file at all. (pull request #7 thanks @TravellingGuy)

2016-01-19 Jose Luis Ruiz [email protected] - 2.0.5

Jose Luis Ruiz [email protected]:

  • Add multiple email_to addresses
  • Adding support for server-hostname in agent config (pull request #3 thanks @alustenberg)
  • Adding ossec_scanpaths configuration thanks to @djjudas21 repository

2015-12-21 Jose Luis Ruiz [email protected] - 2.0.4

Jose Luis Ruiz [email protected]:

  • Add manage_repo option on client.pp (issue #2 reported by @cudgel)
  • Add new repo for RHEL5 and CentOS5 have different rpm signature.

2015-12-02 Jose Luis Ruiz [email protected] - 2.0.3

Jose Luis Ruiz [email protected]:

  • Fix server package name for Ubuntu (thanks to @HielkeJ for Pull request)
  • Add full fingerprint for Ubuntu and Debian (thanks to @HielkeJ for Pull request)

2015-10-13 Jose Luis Ruiz [email protected] - 2.0.2

Jose Luis Ruiz [email protected]:

  • Update Windows Agent to version 2.8.3
  • Update packaget to Ubuntu Vivid and Wily
  • Update packages to Debian Stretch and Sid

2015-10-13 Jose Luis Ruiz [email protected] - 2.0.1

Jose Luis Ruiz [email protected]:

  • Update Windows Agent to version 2.8.1
  • Fix a bug with the Windows Agent ID, now use for all systems fqdn_rand to generate the client.keys ID

2015-09-16 Jose Luis Ruiz [email protected] - 2.0.0

Jose Luis Ruiz [email protected]:

  • Update for all kind of Windows
  • Change repos to Wazuh, Inc.

2015-09-16 Michael Porter [email protected] - 2.0.0

Michael Porter [email protected]:

  • Allow skipping MySQL dependency, disabling active response, and executing rootcheck
  • Windows agent support
  • Use Puppet md5 support, instead of adding parser function
  • Utilize centralized agent configuration
  • Various clean-up and reorganization of Puppet module structure
  • Utilize 'hostname' instead of 'uniqueid' for agent ID, due to uniqueid not existing on Windows, and not necessarily being unique across the org on Linux

2015-08-21 Jonathan Gazeley [email protected] - 1.7.2

Jonathan Gazeley [email protected]:

  • SELinux permissions fix

2015-08-07 Jonathan Gazeley [email protected] - 1.7.0

Jonathan Gazeley [email protected]:

  • Use puppetlabs/mysql to manage MySQL client

2015-08-03 Jonathan Gazeley [email protected] - 1.6.2

Jonathan Gazeley [email protected]:

  • Fix log directory permissions

2015-07-20 Jonathan Gazeley [email protected] - 1.6.0

Jonathan Gazeley [email protected]:

  • Enable SELinux support

2015-07-06 Jonathan Gazeley [email protected] - 1.5.4

Jonathan Gazeley [email protected]:

  • Fix regression in log file permissions (thanks to @paulseward)

2015-06-30 Jonathan Gazeley [email protected] - 1.5.3

Jonathan Gazeley [email protected]:

  • Fix permissions on log files so logwatch on EL7 doesn't complain
  • Key concat::fragment for agentkeys on $agent_name to avoid duplicated resources

2015-06-11 Jonathan Gazeley [email protected] - 1.5.1

Jonathan Gazeley [email protected]:

  • Stop using andyshinn/atomic and configure Atomicorp's OSSEC repo locally

2015-06-10 Jonathan Gazeley [email protected] - 1.4.2

Jonathan Gazeley [email protected]:

  • Fix regression that breaks behaviour on CentOS 6 and lower

2015-05-28 Jonathan Gazeley [email protected] - 1.4.1

Jonathan Gazeley [email protected]:

  • Email notification is no longer hard-coded in ossec.conf (thanks to @earsdown)

2015-03-02 Jonathan Gazeley [email protected] - 1.4.0

Jonathan Gazeley [email protected]:

  • Fix dependency problem by providing EPEL on RHEL (thanks to @otteydw for reporting)

2015-01-16 Jonathan Gazeley [email protected] - 1.3.3

Jonathan Gazeley [email protected]:

  • Fix compatibility issue with PuppetServer (thanks to @d9705996)

2014-11-28 Jonathan Gazeley [email protected] - 1.3.0

Jonathan Gazeley [email protected]:

  • Add support for Debian "Jessie" (thanks to @ivan7farre)