postinst

#!/bin/sh
# postinst script for monitor server package
#
# see: dh_installdeb(1)
set -e
set -x
# summary of how this script can be called:
#        * <postinst> `configure' <most-recently-configured-version>
#        * <old-postinst> `abort-upgrade' <new version>
#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
#          <new-version>
#        * <postinst> `abort-remove'
#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
#          <failed-install-package> <version> `removing'
#          <conflicting-package> <version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package

case "$1" in
    configure)
        GROUP="ossec"
        OSSEC_HOME="/var/ossec"

        # Ensure the correct file permissions and ownership are set for the
        # config files.
        chown root:${GROUP} ${OSSEC_HOME}/etc/local_decoder.xml
        chmod 440 ${OSSEC_HOME}/etc/local_decoder.xml

        chown root:${GROUP} ${OSSEC_HOME}/rules/local_rules.xml
        chmod 440 ${OSSEC_HOME}/rules/local_rules.xml

        # Replace localhost with 127.0.0.1 for smtp_server due to
        #  https://github.com/ossec/ossec-hids/issues/1145
        sed -i -e "s/<smtp_server>localhost<\/smtp_server>/<smtp_server>127.0.0.1<\/smtp_server>/g" /var/ossec/etc/ossec.conf

        # Restart OSSEC to load the new configs.
        service ossec restart
    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0