prevent wazuh-agent from updating - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695

salt/wazuh/init.sls

@@ -45,10 +45,11 @@ ossec:
 
 # Add wazuh agent
 wazuhpkgs:
- pkg.installed:
-   - skip_suggestions: False
-   - pkgs:
-     - wazuh-agent: 3.10.2-1
+  pkg.installed:
+    - skip_suggestions: False
+    - pkgs:
+      - wazuh-agent: 3.10.2-1
+    - update_holds: True
 
 # Add Wazuh agent conf
 wazuhagentconf:

setup/so-functions

@@ -1131,6 +1131,7 @@ saltify() {
 				apt-key add "$temp_install_dir"/gpg/GPG-KEY-WAZUH >> "$setup_log" 2>&1
 				echo "deb http://repo.saltstack.com$py_ver_url_path/ubuntu/$ubuntu_version/amd64/archive/2019.2.5/ $OSVER main" > /etc/apt/sources.list.d/saltstack.list >> "$setup_log" 2>&1
 				echo "deb https://packages.wazuh.com/3.x/apt/ stable main" | tee /etc/apt/sources.list.d/wazuh.list >> "$setup_log" 2>&1
+                apt-mark hold wazuh-agent >> "$setup_log" 2>&1
 				;;
 		esac
 		apt-get update >> "$setup_log" 2>&1

setup/yum_repos/wazuh.repo

@@ -5,3 +5,4 @@ enabled=1
 name=Wazuh repository
 baseurl=https://packages.wazuh.com/3.x/yum/
 protect=1
+exclude=wazuh-agent