Wazuh-ansible: ์šด์˜ ์ฒด์ œ๋ฅผ ๊ธฐ๋ฐ˜์œผ๋กœ ๊ตฌ์„ฑ ํ…œํ”Œ๋ฆฟ ์ƒ์„ฑ

์— ๋งŒ๋“  2018๋…„ 11์›” 05์ผ  ยท  4์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: wazuh/wazuh-ansible

์•ˆ๋…•ํ•˜์„ธ์š” ํŒ€,

๋ฌธ์ œ #77์„ ์ฐธ์กฐํ•˜์—ฌ,

๋น ๋ฅธ ์‘๋‹ต ์†”๋ฃจ์…˜์„ ๋ณด์™„ํ•˜์ง€๋งŒ ๋” ์„ธ๋ถ€์ ์ธ ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•˜์—ฌ ์กด์žฌํ•˜์ง€ ์•Š๋Š” ๋””๋ ‰ํ† ๋ฆฌ ๋ชจ๋‹ˆํ„ฐ๋ง ์˜ค๋ฅ˜๋ฅผ ๋ฐฉ์ง€ํ•˜๊ณ  ์ด๋ฒคํŠธ ์†์‹ค์„ ๋ฐฉ์ง€ํ•˜๊ธฐ ์œ„ํ•ด ์„ค์น˜๋œ ์šด์˜ ์ฒด์ œ์— ๋”ฐ๋ผ ์—์ด์ „ํŠธ์˜ ๋‹ค๋ฅธ ๊ตฌ์„ฑ ํ…œํ”Œ๋ฆฟ์„ ๊ณ„์† ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค. ์˜ˆ๋ฅผ ๋“ค์–ด ๋ชจ๋‹ˆํ„ฐ๋ง ํŒŒ์ผ์€ /var/logs/auth.log์˜ ๊ฒฝ์šฐ์˜€์Šต๋‹ˆ๋‹ค.

๋”ฐ๋ผ์„œ RPM, DEBIAN ๋ฐ WINDOWS์™€ ๊ฐ™์€ ์ฃผ์š” ์‚ฌ๋ก€๋ฅผ ์‹๋ณ„ํ•˜๊ณ  ํŠน์ • ๊ตฌ์„ฑ์„ ์ƒ์„ฑํ•˜์—ฌ ํŠน์ • ๋ฒ„์ „์— ํ•„์š”ํ•œ ๊ฒฝ์šฐ ์ ์šฉํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ์ด ์ž‘์—…์€ ํ–ฅํ›„ ๊ทธ๋ฃน์„ ์‚ฌ์šฉํ•˜์—ฌ ๊ด€๋ฆฌ์ž์˜ ๊ตฌ์„ฑ์„ ๊ณต์œ ํ•  ๋•Œ ์œ ์šฉํ•  ๊ฒƒ์ž…๋‹ˆ๋‹ค.

๋˜ํ•œ ๊ฐ„๋‹จํ•œ ์„ค์น˜์—์„œ ์ˆ˜ํ–‰ํ•˜๋Š” ์ž‘์—…์„ ๋ณต์ œํ•˜๊ณ  ๋นˆ ๊ด€๋ฆฌ์ž์—์„œ ๊ตฌ์„ฑ์„ ๊ณต์œ ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

๋ฌธ์•ˆ ์ธ์‚ฌ,

์•Œํฐ์†Œ

enhancement question

๋ชจ๋“  4 ๋Œ“๊ธ€

์•ˆ๋…•ํ•˜์„ธ์š” ํŒ€,

์ด ๋ฌธ์ œ์™€ ๊ด€๋ จํ•˜์—ฌ Windows ossec.conf ํŒŒ์ผ์ด ์™„์ „ํžˆ ์ƒ์„ฑ๋˜์ง€ ์•Š๋Š”๋‹ค๋Š” ๊ฒƒ์„ ๋ฐฉ๊ธˆ ๊นจ๋‹ฌ์•˜์Šต๋‹ˆ๋‹ค. ์˜ˆ๋ฅผ ๋“ค์–ด ๋ฌธ์„œ์— ๋”ฐ๋ผ syscheck์—์„œ ๋ฌด์‹œํ•  ๊ธฐ๋ณธ ๋””๋ ‰ํ„ฐ๋ฆฌ๋Š” ํฌํ•จ๋˜์–ด ์žˆ์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

๊ฐ์‚ฌ ํ•ด์š”

๊ตฌ์กฐ ์กฐ์ •์„ ๊ณ ๋ คํ•˜๊ณ  ๊ณ„์‹œ๋‹ค๋‹ˆ ๋ฐ˜๊ฐ‘์Šต๋‹ˆ๋‹ค! ์‚ฌ์‹ค ์ด๊ฑธ๋กœ PR์„ ํ•  ์ƒ๊ฐ์ด์—ˆ๋‹ค. ์ œ๊ฐ€ ์ถ”์ฒœํ•˜๊ณ  ์‹ถ์€ ๊ฒƒ์€ ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค.

- name: Include variables based on distribution and operating system family
  include_vars: "{{ item }}"
  with_first_found:
    - "{{ ansible_distribution }}.yaml"
    - "{{ ansible_os_family }}.yaml"
    - default.yaml

... ๊ทธ๋Ÿฐ ๋‹ค์Œ ๋ฐฐํฌ ๋ฐ ์šด์˜ ์ฒด์ œ ์ œํ’ˆ๊ตฐ์— ๋”ฐ๋ผ ์ ์ ˆํ•œ ๊ฐ’์„ ์‚ฌ์šฉํ•˜์—ฌ ๊ฐ YAML ํŒŒ์ผ์— ๋™์ผํ•œ ๋ณ€์ˆ˜๋ฅผ ๋งŒ๋“ญ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š” @paulcalabro ,

์šฐ๋ฆฌ ๋™๋ฃŒ @cadoming ์€ ์ด์™€ ์œ ์‚ฌํ•œ ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•˜๊ธฐ ์œ„ํ•ด ๋…ธ๋ ฅํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค(#95). ๊ทธ๊ฒƒ์€ ์ƒ๋‹นํžˆ ๋ฐœ์ „๋œ ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์ค€๋น„๊ฐ€ ๋˜๋ฉด ๋‹น์‹ ์˜ ์ œ์•ˆ์„ ์—ฐ๊ตฌํ•  ์ˆ˜ ์žˆ์„ ๊ฒƒ์ž…๋‹ˆ๋‹ค.

ํ˜‘์กฐํ•ด ์ฃผ์…”์„œ ๋Œ€๋‹จํžˆ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค. ์›ํ•˜๋Š” ๋งŒํผ ์ž์œ ๋กญ๊ฒŒ ๊ธฐ์—ฌํ•ด ์ฃผ์‹ญ์‹œ์˜ค. ๋งŽ์€ ๋„์›€์ด ๋ฉ๋‹ˆ๋‹ค.

์นœ์• ํ•˜๋Š”,

์•Œํฐ์†Œ ๋ฃจ์ด์ฆˆ-๋ธŒ๋ผ๋ณด

์•ˆ๋…•ํ•˜์„ธ์š” ํŒ€,

์ด ๋ฌธ์ œ๋Š” PR #106๊ณผ #118๋กœ ํ•ด๊ฒฐ๋˜์—ˆ์œผ๋ฏ€๋กœ ๋‹ซ์Šต๋‹ˆ๋‹ค. ์•„์ด๋””์–ด๋ฅผ ์ฃผ์‹  @SitoRBJ ์—๊ฒŒ ๊ฐ์‚ฌ๋“œ๋ฆฝ๋‹ˆ๋‹ค.

๋ฌธ์•ˆ ์ธ์‚ฌ,
์นด๋ฅผ๋กœ์Šค

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰