Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added permissions change for merged.mg files in upgrade #2610

Closed
wants to merge 1 commit into from

Conversation

mjcr99
Copy link
Member

@mjcr99 mjcr99 commented Nov 17, 2023

Related issue
https://github.com/wazuh/wazuh-jenkins/issues/5929

Description

This PR fixes a permissions discordance in the merged.mg files, when updating a manager using packages update. After this change, the merged.mg files will be set to 644 permissions.

Logs example

Ubuntu22
root@server-slave-ubu22:/home/vagrant# curl -sO https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.5.4-1_amd64.deb

root@server-slave-ubu22:/home/vagrant# dpkg -i wazuh-manager_4.5.4-1_amd64.deb 
Selecting previously unselected package wazuh-manager.
(Reading database ... 71284 files and directories currently installed.)
Preparing to unpack wazuh-manager_4.5.4-1_amd64.deb ...
Unpacking wazuh-manager (4.5.4-1) ...
Setting up wazuh-manager (4.5.4-1) ...

root@server-slave-ubu22:/home/vagrant# /var/ossec/bin/wazuh-control start
Starting Wazuh v4.5.4...
Started wazuh-apid...
Started wazuh-csyslogd...
Started wazuh-dbd...
2023/11/17 10:57:11 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.
Started wazuh-integratord...
Started wazuh-agentlessd...
Started wazuh-authd...
Started wazuh-db...
Started wazuh-execd...
Started wazuh-analysisd...
Started wazuh-syscheckd...
Started wazuh-remoted...
Started wazuh-logcollector...
Started wazuh-monitord...
Started wazuh-modulesd...
Completed.

root@server-slave-ubu22:/home/vagrant# ls -la /var/ossec/etc/shared/default/merged.mg 
-rw-rw---- 1 wazuh wazuh 899315 Nov 17 10:57 /var/ossec/etc/shared/default/merged.mg

root@server-slave-ubu22:/home/vagrant# curl -sO https://packages-dev.wazuh.com/warehouse/test/4.7/deb/var/wazuh-manager_4.7.0-1_amd64.deb

root@server-slave-ubu22:/home/vagrant# dpkg -i wazuh-manager_4.7.0-1_amd64.deb 
(Reading database ... 92559 files and directories currently installed.)
Preparing to unpack wazuh-manager_4.7.0-1_amd64.deb ...
Unpacking wazuh-manager (4.7.0-1) over (4.5.4-1) ...
Setting up wazuh-manager (4.7.0-1) ...

root@server-slave-ubu22:/home/vagrant# ls -la /var/ossec/etc/shared/default/merged.mg 
-rw-r--r-- 1 wazuh wazuh 899315 Nov 17 10:57 /var/ossec/etc/shared/default/merged.mg
Centos7
[root@agent1-centos7 vagrant]# curl -sO https://packages.wazuh.com/4.x/yum/wazuh-manager-4.5.4-1.x86_64.rpm

[root@agent1-centos7 vagrant]# rpm -i wazuh-manager-4.5.4-1.x86_64.rpm 
advertencia:wazuh-manager-4.5.4-1.x86_64.rpm: EncabezadoV3 RSA/SHA256 Signature, ID de clave 29111145: NOKEY

[root@agent1-centos7 vagrant]# /var/ossec/bin/wazuh-control start
Starting Wazuh v4.5.4...
Started wazuh-apid...
Started wazuh-csyslogd...
Started wazuh-dbd...
2023/11/17 10:58:00 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.
Started wazuh-integratord...
Started wazuh-agentlessd...
Started wazuh-authd...
Started wazuh-db...
Started wazuh-execd...
Started wazuh-analysisd...
Started wazuh-syscheckd...
Started wazuh-remoted...
Started wazuh-logcollector...
Started wazuh-monitord...
Started wazuh-modulesd...
Completed.

[root@agent1-centos7 vagrant]# ls -la /var/ossec/etc/shared/default/merged.mg 
-rw-rw----. 1 wazuh wazuh 899315 nov 17 10:58 /var/ossec/etc/shared/default/merged.mg

[root@agent1-centos7 vagrant]# curl -sO https://packages-dev.wazuh.com/warehouse/test/4.7/rpm/var/wazuh-manager-4.7.0-1.x86_64.rpm

[root@agent1-centos7 vagrant]# rpm -U wazuh-manager-4.7.0-1.x86_64.rpm 
advertencia:/var/ossec/etc/ossec.conf creado como /var/ossec/etc/ossec.conf.rpmnew

[root@agent1-centos7 vagrant]# ls -la /var/ossec/etc/shared/default/merged.mg 
-rw-r--r--. 1 wazuh wazuh 899315 nov 17 10:58 /var/ossec/etc/shared/default/merged.mg

Tests

  • Tests for Linux RPM
    • Build the package for x86_64
  • Tests for Linux deb
    • Build the package for x86_64

@mjcr99 mjcr99 closed this Nov 17, 2023
@mjcr99 mjcr99 deleted the fix/5929-change-mergedmg-permissions branch November 17, 2023 11:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant