feat: add uninstall script

scripts/uninstall.sh

@@ -0,0 +1,156 @@
+#!/bin/bash
+
+# Check if we're running in bash; if not, adjust behavior
+if [ -n "$BASH_VERSION" ]; then
+    set -euo pipefail
+else
+    set -eu
+fi
+
+# Determine OS-specific paths
+OS_NAME=$(uname)
+if [[ $OS_NAME == "Linux" ]]; then
+    OSSEC_CONF_PATH="/var/ossec/etc/ossec.conf"
+elif [[ $OS_NAME == "Darwin" ]]; then
+    OSSEC_CONF_PATH="/Library/Ossec/etc/ossec.conf"
+else
+    error_message "Unsupported operating system."
+    exit 1
+fi
+
+# Define text formatting
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[1;34m'
+BOLD='\033[1m'
+NORMAL='\033[0m'
+
+# Function for logging with timestamp
+log() {
+    local LEVEL="$1"
+    shift
+    local MESSAGE="$*"
+    local TIMESTAMP
+    TIMESTAMP=$(date +"%Y-%m-%d %H:%M:%S")
+    echo -e "${TIMESTAMP} ${LEVEL} ${MESSAGE}"
+}
+
+# Logging helpers
+info_message() {
+    log "${BLUE}${BOLD}[INFO]${NORMAL}" "$*"
+}
+
+warn_message() {
+    log "${YELLOW}${BOLD}[WARNING]${NORMAL}" "$*"
+}
+
+error_message() {
+    log "${RED}${BOLD}[ERROR]${NORMAL}" "$*"
+}
+
+success_message() {
+    log "${GREEN}${BOLD}[SUCCESS]${NORMAL}" "$*"
+}
+
+# Function to ensure the script runs with appropriate privileges
+maybe_sudo() {
+    if [ "$EUID" -ne 0 ]; then
+        if command -v sudo &>/dev/null; then
+            sudo "$@"
+        else
+            error_message "Please run the script as root or install sudo."
+            exit 1
+        fi
+    else
+        "$@"
+    fi
+}
+
+# Function to remove directories and files
+remove_snort_dirs_files() {
+    local dirs=("$@")
+    for dir in "${dirs[@]}"; do
+        if [ -d "$dir" ]; then
+            maybe_sudo rm -rf "$dir"
+            info_message "Removed directory $dir"
+        fi
+    done
+}
+
+remove_snort_files() {
+    local files=("$@")
+    for file in "${files[@]}"; do
+        if [ -f "$file" ]; then
+            maybe_sudo rm -f "$file"
+            info_message "Removed file $file"
+        fi
+    done
+}
+
+# Function to revert changes in ossec.conf
+revert_ossec_conf() {
+    local ossec_conf="$1"
+    local snort_tag="<!-- snort -->"
+
+    if maybe_sudo grep -q "$snort_tag" "$ossec_conf"; then
+        maybe_sudo sed -i "/$snort_tag/,/<\/localfile>/d" "$ossec_conf"
+        success_message "Reverted changes in $ossec_conf"
+    else
+        info_message "No Snort-related changes found in $ossec_conf"
+    fi
+}
+
+# Function to uninstall Snort on macOS
+uninstall_snort_macos() {
+    info_message "Uninstalling Snort on macOS"
+    brew uninstall snort || warn_message "Snort was not installed via Homebrew."
+
+    remove_snort_dirs_files \
+        "/usr/local/etc/rules" \
+        "/usr/local/etc/so_rules" \
+        "/usr/local/etc/lists" \
+        "/var/log/snort"
+
+    remove_snort_files \
+        "/usr/local/etc/rules/local.rules" \
+        "/usr/local/etc/lists/default.blocklist"
+
+    revert_ossec_conf "$OSSEC_CONF_PATH"
+    success_message "Snort uninstalled on macOS"
+}
+
+# Function to uninstall Snort on Linux
+uninstall_snort_linux() {
+    info_message "Uninstalling Snort on Linux"
+    if command -v apt >/dev/null 2>&1; then
+        sudo apt-get purge -y snort && sudo apt-get autoremove -y
+    else
+        warn_message "This script supports only Debian-based systems for uninstallation."
+    fi
+
+    remove_snort_dirs_files \
+        "/etc/snort/rules" \
+        "/var/log/snort"
+
+    remove_snort_files \
+        "/etc/snort/snort.conf" \
+        "/etc/snort/rules/local.rules"
+
+    revert_ossec_conf "$OSSEC_CONF_PATH"
+    success_message "Snort uninstalled on Linux"
+}
+
+# Main logic: uninstall Snort based on the operating system
+case "$OS_NAME" in
+    Linux)
+        uninstall_snort_linux
+        ;;
+    Darwin)
+        uninstall_snort_macos
+        ;;
+    *)
+        error_message "Unsupported OS: $OS_NAME"
+        exit 1
+        ;;
+esac