[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Ossec-list] a few items



Hi Dominik,

Thanks for the feedback. I just released the 0.7p1 (patch 1) version that
includes these fixes.

1- Now the ossec-control is looking to see where it is installed,
finding the right path.
2-Fixed that too.
3-Altough this message was not fatal (the process didn't die) I fixed it too.

The checksum_dir was used to store the temporary checksum entries. I removed
it from the install :)

Let us know if you find any more problems...

Thanks,

--
Daniel B. Cid
dcid @ ( at ) ossec.net
http://www.ossec.net

On 3/29/06, Dominik L. Borkowski <dom at vbi.vt.edu> wrote:
>
> Hello,
> I stumbled upon ossec, and it really sparked my interest. I'm interested in
> deploying it for our servers, maybe in addition to tripwire.
>
> Now, a few things I've noticed that may be of interest to the developers:
>
> 1) the install script doesn't adjust ossec-control if you specify a location
> different than /var/ossec. So far that's the only thing that needs to be
> manually adjusted
>
> 2) ownership on ossec-control seems to be a bit odd: it's owned by uid 1000,
> gid 1000, which is different from the users that ossec creates.
>
> 3) on the agent side during the install I've selected to not use active
> response. However, ossec-control will still start ossec-agentd, which of
> course then fails:
>
> 2006/03/29 09:33:01 ossec-agentd(1301): Unable to connect to active response
> queue.
>
> I also have a question about the checksum_db dir, what is it used for? I've
> tried server, agent and local installations, and neither seem to be using
> that dir for anything.
>
> None of the issues listed above are critical, but they may make life easier on
> some folks :)
>
> sincerely,
> --
> Dominik L. Borkowski - Senior Systems Administrator
> Virginia Bioinformatics Institute - www.vbi.vt.edu
> _______________________________________________
> ossec-list mailing list
> ossec-list at ossec.net
> http://mailman.underlinux.com.br/mailman/listinfo/ossec-list
>


OSSEC home | Main Index | Thread Index


OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.