Merge pull request #729 from Security-Onion-Solutions/quickfix/wazuh

prevent wazuh-agent from updating

salt/wazuh/init.sls

@@ -49,6 +49,7 @@ wazuhpkgs:
     - skip_suggestions: False
     - pkgs:
       - wazuh-agent: 3.10.2-1
+    - update_holds: True
 
 # Add Wazuh agent conf
 wazuhagentconf:

setup/so-functions

@@ -1131,6 +1131,7 @@ saltify() {
 				apt-key add "$temp_install_dir"/gpg/GPG-KEY-WAZUH >> "$setup_log" 2>&1
 				echo "deb http://repo.saltstack.com$py_ver_url_path/ubuntu/$ubuntu_version/amd64/archive/2019.2.5/ $OSVER main" > /etc/apt/sources.list.d/saltstack.list >> "$setup_log" 2>&1
 				echo "deb https://packages.wazuh.com/3.x/apt/ stable main" | tee /etc/apt/sources.list.d/wazuh.list >> "$setup_log" 2>&1
+                apt-mark hold wazuh-agent >> "$setup_log" 2>&1
 				;;
 		esac
 		apt-get update >> "$setup_log" 2>&1

setup/yum_repos/wazuh.repo

@@ -5,3 +5,4 @@ enabled=1
 name=Wazuh repository
 baseurl=https://packages.wazuh.com/3.x/yum/
 protect=1
+exclude=wazuh-agent