[Ossec-list] ossec-list Digest, Vol 7, Issue 9

[daniel.cid at gmail.com (Daniel Cid)]

Hi Sebastian,

Just complementing what Ahmet was saying, from your
output it looks like mkdir is not working correctly...
Can you see if the following commands work:

mkdir -m 700 -p /var/ossec
mkdir -m 700 -p ./mktest-1

If not, can you show us "mkdir -h (or --help)"

In addtion to that, show us the output of:

/usr/sbin/groupadd ossec
/usr/sbin/useradd -d /var/ossec -s /bin/false -g ossec ossec

Thanks!

--
Daniel B. Cid
dcid @ ( at ) ossec.net


On 5/16/06, Sebastian Benner <sebastian.benner at fernuni-hagen.de> wrote:
>
>
> Hello,
>
> thank's for the help. I just checked my installation directory:
>
> ..............................................................
> bash-3.00# cd bin
> bash: cd: bin: Not a directory
> bash-3.00# more bin
> ELF?4?4 (?44???,?88?/usr/lib/ld.so.1
>
> ?!#$&(),0246789:;<>@BDFIJLMNOQRSTVXZ[\]^_`acefhiklpqrtwxyz{|}
> bash-3.00#
> bash-3.00# ls -alF
> total 200
> drwxr-xr-x   6 1000         1005 May 15 11:13 ./
> drwxrwxrwt   3 root          377 May 16 03:30 ../
> -rw-r--r--   1 1000         3132 Feb  8 21:04 BUGS
> -rw-r--r--   1 1000        18638 May 10 01:40 CHANGELOG
> -rw-r--r--   1 1000          365 Apr 12 22:42 CONFIG
> -rw-r--r--   1 1000         1240 May  4 21:29 CONTRIB
> -rw-r--r--   1 1000         1926 Apr 12 22:42 INSTALL
> -rw-r--r--   1 1000         1887 Mar 22 22:01 INSTALL.br
> -rw-r--r--   1 1000          234 May 10 01:40 README
> -rw-r--r--   1 1000          236 Feb  8 16:35 TODO
> drwxr-xr-x   3 1000          400 May 10 16:35 active-response/
> -rwxr-xr-x   1 root        42256 May 16 08:19 bin*
> drwxr-xr-x   3 1000          745 May 10 16:35 doc/
> drwxr-xr-x   4 1000          665 May 15 10:42 etc/
> -rwxr-xr-x   1 1000        19007 May 10 01:40 install.sh*
> drwxr-xr-x  23 1000         2015 May 15 10:43 src/
> ..............................................................
>
> bin is created, but it's a regular file and not a directory ...
> I removed bin and followed your hint (creating ./bin by hand). It's still
> not working ...
>
> ------------------------------------------------------------
> cp -pr ossec-maild ../../bin
> cp -pr ossec-execd ../../bin
> cp -pr ossec-analysisd ../../bin
> cp -pr ossec-logcollector ../../bin
> cp -pr ossec-remoted ../../bin
> cp -pr ossec-agentd ../../bin
> cp -pr manage_agents ../../bin
> cp -pr manage_agents ../../bin
> cp -pr syscheck_update clear_stats ../../bin
> cp -pr ossec-syscheckd ../../bin
> chmod: WARNING: can't access /var/ossec
> chown: unknown user id: root:ossec
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/queue/alerts
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/queue/ossec
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/queue/fts
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/queue/syscheck
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/queue/rootcheck
> chown: unknown user id: ossecr:ossec
> chmod: WARNING: can't access /var/ossec/queue/agent-info
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/stats
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/logs
> touch: cannot create /var/ossec/logs/ossec.log: No such file or directory
> chown: unknown user id: ossec:ossec
> chmod: WARNING: can't access /var/ossec/logs/ossec.log
> cp: /var/ossec/rules/ not found
> chown: unknown user id: root:ossec
> chmod: WARNING: can't access /var/ossec/rules
> chmod: WARNING: can't access /var/ossec/etc
> chown: unknown user id: root:ossec
> Usage: cp [-f] [-i] [-p] [-@] f1 f2
>         cp [-f] [-i] [-p] [-@] f1 ... fn d1
>         cp -r|-R [-H|-L|-P] [-f] [-i] [-p] [-@] d1 ... dn-1 dn
> chmod: WARNING: can't access /var/ossec/var/run
> chown: unknown user id: root:ossec
> cp: /var/ossec/bin/ not found
> cp: cannot create /var/ossec/bin/: No such file or directory
> cp: cannot create /var/ossec/bin/: No such file or directory
> cp: cannot create /var/ossec/bin/: No such file or directory
> cp: cannot create /var/ossec/bin/ossec-control: No such file or directory
> cp: cannot create /var/ossec/etc/: No such file or directory
> cp: /var/ossec/etc/shared/ not found
> cp: /var/ossec/active-response/bin/ not found
> chmod: WARNING: can't access /var/ossec/active-response/bin/*
> Not overwritting /etc/ossec.conf.
> ------------------------------------------------------------
>
> bash-3.00# showrev
> Hostname: ossec-server
> Hostid: 83566709
> Release: 5.10
> Kernel architecture: sun4u
> Application architecture: sparc
> Hardware provider: Sun_Microsystems
> Domain:
> Kernel version: SunOS 5.10 Generic_118822-25
>
>
> Regards,
>
> Sebastian