[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Ossec-list] ossec-list Digest, Vol 7, Issue 9



Hi Sebastian,

I generated a Zone on my box, and installed ossec-hids without
problem. I think it would be better if we try to install ossec-hids
on your system step by step. Now we may execute every command in make
file by hand if you want. Please follow the steps I executed on my 
system, and send us the outputs. To start with it:

1. Please check the source is ok;
bash-3.00# ls -al ossec-hids-0.8.tar.gz
-rw-r--r--   1 root  root   244902 May 18 08:35 ossec-hids-0.8.tar.gz
bash-3.00# sum ossec-hids-0.8.tar.gz
33695 479 ossec-hids-0.8.tar.gz
bash-3.00# cd ossec-hids-0.8
bash-3.00# ls
BUGS             INSTALL          active-response  src
CHANGELOG        INSTALL.br       doc
CONFIG           README           etc
CONTRIB          TODO             install.sh
bash-3.00# ls -al
total 114
drwxr-xr-x   6 1000     1000         512 May 10 17:35 .
drwxr-xr-x  20 root     root         512 May 18 08:24 ..
-rw-r--r--   1 1000     1000        3132 Feb  8 22:04 BUGS
-rw-r--r--   1 1000     1000       18638 May 10 02:40 CHANGELOG
-rw-r--r--   1 1000     1000         365 Apr 12 23:42 CONFIG
-rw-r--r--   1 1000     1000        1240 May  4 22:29 CONTRIB
-rw-r--r--   1 1000     1000        1926 Apr 12 23:42 INSTALL
-rw-r--r--   1 1000     1000        1887 Mar 22 23:01 INSTALL.br
-rw-r--r--   1 1000     1000         234 May 10 02:40 README
-rw-r--r--   1 1000     1000         236 Feb  8 17:35 TODO
drwxr-xr-x   3 1000     1000         512 May 10 17:35 active-response
drwxr-xr-x   3 1000     1000         512 May 10 17:35 doc
drwxr-xr-x   4 1000     1000         512 May 10 17:35 etc
-rwxr-xr-x   1 1000     1000       19007 May 10 02:40 install.sh
drwxr-xr-x  23 1000     1000        1024 May 10 17:35 src

2. Please check some system variables:
bash-3.00# cd src
bash-3.00# ls
Config.Make       addagent          logcollector      remoted
InstallAgent.sh   analysisd         os_crypto         rootcheck
InstallServer.sh  client-agent      os_execd          shared
LOCATION          config            os_maild          syscheckd
Makeall           error_messages    os_net            sysinfo
Makefile          headers           os_regex          util
VERSION           init              os_xml            win32
bash-3.00# MACH=`uname -m`
bash-3.00# OS=`uname`
bash-3.00# VERSION=`cat ./VERSION`
bash-3.00# echo $MACH
i86pc
bash-3.00# echo $OS
SunOS
bash-3.00# echo $VERSION
v0.8

3. Please be sure that there is no Config.OS file
bash-3.00# ls ./Config.OS >/dev/null 2>&1
bash-3.00# echo $?
2
***If there is a Config.OS file, please remove it.

bash-3.00# echo "" > Config.OS

4. Check if openssl exists on your system:
  bash-3.00# ls /usr/include/openssl/opensslconf.h > /dev/null 2>&1
bash-3.00# echo $?
2
***If not, no problem.(I don't have openssl installed on my system also)

5. If $OS is SunOS, fill the Config.OS file:
bash-3.00# echo "EEXTRA=-lsocket -lnsl -lresolv -DSOLARIS -DHIGHFIRST 
-include strings.h">>Config.OS
bash-3.00# cat Config.OS

EEXTRA=-lsocket -lnsl -lresolv -DSOLARIS -DHIGHFIRST -include strings.h

6. Please set the PATH
bash-3.00# PATH=$PATH:/usr/ccs/bin
bash-3.00# export PATH
bash-3.00# echo $PATH
/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/dt/bin:/usr/openwin/bin:/usr/ucb:/usr/ccs/bin:/usr/sfw/bin:/usr/ccs/bin


7. Now we are ready to compile:
enter the following directories respectively and make:
os_xml, os_regex, os_net, os_crypto, shared, config, os_maild, os_execd,
analysisd, logcollector, remoted, client-agent, addagent, util,
rootcheck, syscheckd:


bash-3.00# cd os_xml
bash-3.00# make
gcc -DXML_VAR=\"var\" -Wall -I../ -I../headers    -lsocket -lnsl 
-lresolv -DSOLARIS -DHIGHFIRST -include strings.h -DARGV0=\"os_xml\" 
-DXML_VAR=\"var\" -DOSSECHIDS -c os_xml.c os_xml_access.c 
os_xml_node_access.c os_xml_variables.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru os_xml.a os_xml.o os_xml_access.o os_xml_node_access.o 
os_xml_variables.o
ranlib os_xml.a
bash-3.00# cd ..
bash-3.00# cd os_regex
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"os_regex\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c *.c -Wall
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru os_regex.a *.o
ranlib os_regex.a
bash-3.00# cd ..
bash-3.00# cd os_net
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"os_net\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c os_net.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru os_net.a os_net.o
ranlib os_net.a
bash-3.00# cd ../os_crypto/
bash-3.00# make
make[1]: Entering directory `/ossec-hids-0.8/src/os_crypto/blowfish'
gcc -Wall -I../../ -I../../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"blowfish_op\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c bf_op.c bf_skey.c bf_enc.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru bf_op.a bf_op.o bf_skey.o bf_enc.o
ranlib bf_op.a
make[1]: Leaving directory `/ossec-hids-0.8/src/os_crypto/blowfish'
make[1]: Entering directory `/ossec-hids-0.8/src/os_crypto/md5'
gcc -Wall -I../../ -I../../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"md5_op\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c md5.c md5_op.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru md5_op.a md5_op.o md5.o
ranlib md5_op.a
make[1]: Leaving directory `/ossec-hids-0.8/src/os_crypto/md5'
make[1]: Entering directory `/ossec-hids-0.8/src/os_crypto/shared'
gcc -Wall -I../../ -I../../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"shared\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c sec.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru shared.a sec.o
ranlib shared.a
make[1]: Leaving directory `/ossec-hids-0.8/src/os_crypto/shared'
ar cru os_crypto.a blowfish/bf_op.o blowfish/bf_skey.o blowfish/bf_enc.o 
md5/md5_op.o md5/md5.o shared/sec.o
ranlib os_crypto.a
bash-3.00# cd ..
bash-3.00# cd shared/
bash-3.00# make
gcc -c -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"shared-libs\" -DXML_VAR=\"var\" 
-DOSSECHIDS *.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru lib_shared.a *.o
ranlib lib_shared.a
bash-3.00# cd ..
bash-3.00# cd config/
bash-3.00# make
gcc -c -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-config\" 
-DXML_VAR=\"var\" -DOSSECHIDS *.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru lib_config.a *.o
ranlib lib_config.a
bash-3.00# cd ..
bash-3.00# cd os_maild
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -i
nclude strings.h -DARGV0=\"ossec-maild\" -DXML_VAR=\"var\" -DOSSECHIDS 
maild.c c
onfig.c os_maild_client.c sendmail.c mail_list.c ../config/*.c 
../shared/lib_sha
red.a ../os_net/os_net.a ../os_regex/os_regex.a ../os_xml/os_xml.a -o 
ossec-mail
d
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -i
nclude strings.h -DARGV0=\"ossec-maild\" -DXML_VAR=\"var\" -DOSSECHIDS 
-c maild.
c config.c os_maild_client.c sendmail.c mail_list.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
bash-3.00# cd ..
bash-3.00# cd os_execd
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -i
nclude strings.h -DARGV0=\"ossec-execd\" -DXML_VAR=\"var\" -DOSSECHIDS 
execd.c e
xec.c config.c ../shared/lib_shared.a ../os_net/os_net.a 
../os_regex/os_regex.a
../os_xml/os_xml.a -o ossec-execd
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -i
nclude strings.h -DARGV0=\"ossec-execd\" -DXML_VAR=\"var\" -DOSSECHIDS 
-c execd.
c exec.c config.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
bash-3.00# cd ..
bash-3.00# cd analysisd/
bash-3.00# make
cd ./alerts; make
make[1]: Entering directory `/ossec-hids-0.8/src/analysisd/alerts'
gcc -I../ -Wall -I../../ -I../../headers    -lsocket -lnsl -lresolv 
-DSOLARIS -D
HIGHFIRST -include strings.h -DARGV0=\"alerts\" -DXML_VAR=\"var\" 
-DOSSECHIDS -c
mail.c log.c exec.c getloglocation.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru alerts.a mail.o log.o exec.o getloglocation.o
ranlib alerts.a
make[1]: Leaving directory `/ossec-hids-0.8/src/analysisd/alerts'
cd ./decoders; make
make[1]: Entering directory `/ossec-hids-0.8/src/analysisd/decoders'
gcc -Wall -I../../ -I../../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFI
RST -include strings.h -DARGV0=\"ossec-analysisd\" -DXML_VAR=\"var\" 
-DOSSECHIDS
  -I../ -c *.c
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru decoders.a *.o
ranlib decoders.a
make[1]: Leaving directory `/ossec-hids-0.8/src/analysisd/decoders'
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -i
nclude strings.h -DARGV0=\"ossec-analysisd\" -DXML_VAR=\"var\" 
-DOSSECHIDS -I./
analysisd.c stats.c rules.c rules_list.c config.c fts.c eventinfo.c 
eventinfo_li
st.c cleanevent.c active-response.c ../config/*.c decoders/decoders.a 
alerts/ale
rts.a ../os_maild/os_maild_client.o ../os_xml/os_xml.a 
../os_regex/os_regex.a ..
/os_net/os_net.a ../shared/lib_shared.a -o ossec-analysisd
bash-3.00# cd ..
bash-3.00# cd logcollector/

bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-logcollector\" 
-DXML_VAR=\"var\" -DOSSECHIDS -DARGV0=\"ossec-logcollector\" *.c 
../config/*.c ../shared/lib_shared.a ../os_xml/os_xml.a 
../os_regex/os_regex.a ../os_net/os_net.a -o ossec-logcollector
bash-3.00# cd ..
bash-3.00# cd remoted
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-remoted\" 
-DXML_VAR=\"var\" -DOSSECHIDS  *.c ../config/*.c ../shared/lib_shared.a 
../os_net/os_net.a ../os_xml/os_xml.a ../os_regex/os_regex.a 
../os_crypto/os_crypto.a  -o ossec-remoted
bash-3.00# cd ..
bash-3.00# cd client-agent
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-agentd\" 
-DXML_VAR=\"var\" -DOSSECHIDS *.c ../config/*.c ../shared/lib_shared.a 
../os_xml/os_xml.a ../os_regex/os_regex.a ../os_net/os_net.a 
../os_crypto/os_crypto.a  -o ossec-agentd
bash-3.00# cd ..
bash-3.00# cd addagent
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"manage_agents\" 
-DXML_VAR=\"var\" -DOSSECHIDS *.c ../shared/lib_shared.a 
../os_regex/os_regex.a ../os_crypto/os_crypto.a -o manage_agents
bash-3.00# cd ..
bash-3.00# cd util/
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"\" -DXML_VAR=\"var\" 
-DOSSECHIDS ../addagent/manage_agents.c ../addagent/manage_keys.c 
../addagent/validate.c ../addagent/read_from_user.c ../addagent/b64.c 
syscheck_update.c ../shared/lib_shared.a ../os_regex/os_regex.a 
../os_crypto/os_crypto.a -o syscheck_update
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"\" -DXML_VAR=\"var\" 
-DOSSECHIDS clear_stats.c ../shared/lib_shared.a ../os_regex/os_regex.a 
../os_crypto/os_crypto.a -o clear_stats
bash-3.00# cd ..
bash-3.00# cd rootcheck/
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-rootcheck\" 
-DXML_VAR=\"var\" -DOSSECHIDS -c *.c -D_GNU_SOURCE
gcc: -lsocket: linker input file unused because linking not done
gcc: -lnsl: linker input file unused because linking not done
gcc: -lresolv: linker input file unused because linking not done
ar cru rootcheck_lib.a *.o
ranlib rootcheck_lib.a
bash-3.00# cd ..
bash-3.00# cd sys
syscheckd/ sysinfo/
bash-3.00# cd syscheckd/
bash-3.00# make
gcc -Wall -I../ -I../headers    -lsocket -lnsl -lresolv -DSOLARIS 
-DHIGHFIRST -include strings.h -DARGV0=\"ossec-syscheckd\" 
-DXML_VAR=\"var\" -DOSSECHIDS syscheck.c config.c create_db.c 
run_check.c ../config/*.c ../shared/lib_shared.a ../os_xml/os_xml.a 
../os_regex/os_regex.a ../os_net/os_net.a ../os_crypto/os_crypto.a 
../rootcheck/rootcheck_lib.a -o ossec-syscheckd

Please ignore the gcc "linker input file unused because linking not
done" messages.

Now everything should be compiled cleanly. If so, please let me know
to explain next steps.

Regards,

Ahmet Ozturk.




Sebastian Benner wrote:
> 
> Hello Daniel,
> 
> that's what I get - seems to be ok:
> 
> ---------------------------------------------------------
> bash-3.00# mkdir -m 700 -p /var/ossec
> bash-3.00# ls -alF /var/
> total 50
> .....
> drwx------   2 root          512 May 17 07:36 ossec/
> .....
> bash-3.00# mkdir -m 700 -p ./mktest-1
> bash-3.00# ls -alF
> total 160
> drwxr-xr-x   7 1000         1010 May 17 07:36 ./
> drwxrwxrwt   3 root          377 May 17 07:36 ../
> -rw-r--r--   1 1000         3132 Feb  8 21:04 BUGS
> -rw-r--r--   1 1000        18638 May 10 01:40 CHANGELOG
> -rw-r--r--   1 1000          365 Apr 12 22:42 CONFIG
> -rw-r--r--   1 1000         1240 May  4 21:29 CONTRIB
> -rw-r--r--   1 1000         1926 Apr 12 22:42 INSTALL
> -rw-r--r--   1 1000         1887 Mar 22 22:01 INSTALL.br
> -rw-r--r--   1 1000          234 May 10 01:40 README
> -rw-r--r--   1 1000          236 Feb  8 16:35 TODO
> drwxr-xr-x   3 1000          400 May 10 16:35 active-response/
> drwxr-xr-x   3 1000          745 May 10 16:35 doc/
> drwxr-xr-x   4 1000          600 May 10 16:35 etc/
> -rwxr-xr-x   1 1000        19007 May 10 01:40 install.sh*
> drwx------   2 root          117 May 17 07:36 mktest-1/
> drwxr-xr-x  23 1000         1949 May 10 16:35 src/
> bash-3.00# /usr/sbin/groupadd ossec
> bash-3.00# /usr/sbin/useradd -d /var/ossec -s /bin/false -g ossec ossec
> bash-3.00# cat /etc/passwd
> .....
> ossec:x:101:101::/var/ossec:/bin/false
> bash-3.00# cat /etc/group
> .....
> ossec::101:
> bash-3.00# man mkdir
> Reformatting page.  Please Wait... done
> 
> User Commands                                            mkdir(1)
> 
> NAME
>      mkdir - make directories
> 
> SYNOPSIS
>      mkdir [-m mode] [-p] dir...
> 
> DESCRIPTION
>      The mkdir command creates the named directories in mode  777
>      (possibly altered by the file mode creation mask umask(1)).
> 
>      Standard entries in a directory  (for  instance,  the  files
>      ".", for the directory itself, and "..", for its parent) are
>      made automatically. mkdir cannot  create  these  entries  by
>      name.  Creation  of a directory requires write permission in
>      the parent directory.
> 
>      The owner-ID and group-ID of the new directories are set  to
>      the  process's effective user-ID and group-ID, respectively.
>      mkdir calls the mkdir(2) system call.
> 
>   setgid and mkdir
>      To change the setgid bit on a newly created  directory,  you
>      must use chmod g+s or chmod g-s after executing mkdir.
> 
>      The setgid bit setting is inherited from the  parent  direc-
>      tory.
> 
> OPTIONS
>      The following options are supported:
> 
>      -m mode         This option allows users to specify the mode
>                      to  be used for new directories. Choices for
>                      modes can be found in chmod(1).
> 
>      -p              With  this  option,  mkdir  creates  dir  by
>                      creating  all the non-existing parent direc-
>                      tories first. The mode given to intermediate
>                      directories  will  be the difference between
>                      777 and the bits set in the file mode  crea-
>                      tion  mask. The difference, however, must be
>                      at least 300 (write and  execute  permission
>                      for the user).
> 
> OPERANDS
>      The following operand is supported:
> 
> SunOS 5.10           Last change: 1 Feb 1995                    1
> 
> User Commands                                            mkdir(1)
> 
>      dir      A path name of a directory to be created.
> 
> USAGE
>      See largefile(5) for the  description  of  the  behavior  of
>      mkdir  when  encountering  files  greater than or equal to 2
>      Gbyte ( 2**31 bytes).
> 
> EXAMPLES
>      Example 1: Using mkdir
> 
>      The following example:
> 
>      example% mkdir -p ltr/jd/jan
> 
>      creates the subdirectory structure ltr/jd/jan.
> 
> ENVIRONMENT VARIABLES
>      See environ(5) for descriptions of the following environment
>      variables  that affect the execution of mkdir: LANG, LC_ALL,
>      LC_CTYPE, LC_MESSAGES, and NLSPATH.
> 
> EXIT STATUS
>      The following exit values are returned:
> 
>      0        All the specified directories were created success-
>               fully  or  the  -p option was specified and all the
>               specified directories now exist.
> 
>      >0       An error occurred.
> 
> ATTRIBUTES
>      See attributes(5) for descriptions of the  following  attri-
>      butes:
> 
>      ____________________________________________________________
>     |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
>     |_____________________________|_____________________________|
>     | Availability                | SUNWcsu                     |
>     |_____________________________|_____________________________|
>     | CSI                         | enabled                     |
>     |_____________________________|_____________________________|
>     | Interface Stability         | Standard                    |
>     |_____________________________|_____________________________|
> 
> SunOS 5.10           Last change: 1 Feb 1995                    2
> 
> User Commands                                            mkdir(1)
> 
> SEE ALSO
>      rm(1), sh(1), umask(1), intro(2),  mkdir(2),  attributes(5),
>      environ(5), largefile(5), standards(5)
> 
> SunOS 5.10           Last change: 1 Feb 1995                    3
> -------------------------------------------------------------------
> 
> Regards,
> 
> Sebastian
> 
> 
> 
> 
> 
> 
> 
> On Tue, 16 May 2006, Daniel Cid wrote:
> 
>> Hi Sebastian,
>>
>> Just complementing what Ahmet was saying, from your
>> output it looks like mkdir is not working correctly...
>> Can you see if the following commands work:
>>
>> mkdir -m 700 -p /var/ossec
>> mkdir -m 700 -p ./mktest-1
>>
>> If not, can you show us "mkdir -h (or --help)"
>>
>> In addtion to that, show us the output of:
>>
>> /usr/sbin/groupadd ossec
>> /usr/sbin/useradd -d /var/ossec -s /bin/false -g ossec ossec
>>
>> Thanks!
>>
>> -- 
>> Daniel B. Cid
>> dcid @ ( at ) ossec.net
>>
>>
>> On 5/16/06, Sebastian Benner <sebastian.benner at fernuni-hagen.de> wrote:
>>
>>>
>>>
>>> Hello,
>>>
>>> thank's for the help. I just checked my installation directory:
>>>
>>> ..............................................................
>>> bash-3.00# cd bin
>>> bash: cd: bin: Not a directory
>>> bash-3.00# more bin
>>> ELF?4?4 (?44???,?88?/usr/lib/ld.so.1
>>>
>>> ?!#$&(),0246789:;<>@BDFIJLMNOQRSTVXZ[\]^_`acefhiklpqrtwxyz{|}
>>> bash-3.00#
>>> bash-3.00# ls -alF
>>> total 200
>>> drwxr-xr-x   6 1000         1005 May 15 11:13 ./
>>> drwxrwxrwt   3 root          377 May 16 03:30 ../
>>> -rw-r--r--   1 1000         3132 Feb  8 21:04 BUGS
>>> -rw-r--r--   1 1000        18638 May 10 01:40 CHANGELOG
>>> -rw-r--r--   1 1000          365 Apr 12 22:42 CONFIG
>>> -rw-r--r--   1 1000         1240 May  4 21:29 CONTRIB
>>> -rw-r--r--   1 1000         1926 Apr 12 22:42 INSTALL
>>> -rw-r--r--   1 1000         1887 Mar 22 22:01 INSTALL.br
>>> -rw-r--r--   1 1000          234 May 10 01:40 README
>>> -rw-r--r--   1 1000          236 Feb  8 16:35 TODO
>>> drwxr-xr-x   3 1000          400 May 10 16:35 active-response/
>>> -rwxr-xr-x   1 root        42256 May 16 08:19 bin*
>>> drwxr-xr-x   3 1000          745 May 10 16:35 doc/
>>> drwxr-xr-x   4 1000          665 May 15 10:42 etc/
>>> -rwxr-xr-x   1 1000        19007 May 10 01:40 install.sh*
>>> drwxr-xr-x  23 1000         2015 May 15 10:43 src/
>>> ..............................................................
>>>
>>> bin is created, but it's a regular file and not a directory ...
>>> I removed bin and followed your hint (creating ./bin by hand). It's 
>>> still
>>> not working ...
>>>
>>> ------------------------------------------------------------
>>> cp -pr ossec-maild ../../bin
>>> cp -pr ossec-execd ../../bin
>>> cp -pr ossec-analysisd ../../bin
>>> cp -pr ossec-logcollector ../../bin
>>> cp -pr ossec-remoted ../../bin
>>> cp -pr ossec-agentd ../../bin
>>> cp -pr manage_agents ../../bin
>>> cp -pr manage_agents ../../bin
>>> cp -pr syscheck_update clear_stats ../../bin
>>> cp -pr ossec-syscheckd ../../bin
>>> chmod: WARNING: can't access /var/ossec
>>> chown: unknown user id: root:ossec
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/alerts
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/ossec
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/fts
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/syscheck
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/rootcheck
>>> chown: unknown user id: ossecr:ossec
>>> chmod: WARNING: can't access /var/ossec/queue/agent-info
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/stats
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/logs
>>> touch: cannot create /var/ossec/logs/ossec.log: No such file or 
>>> directory
>>> chown: unknown user id: ossec:ossec
>>> chmod: WARNING: can't access /var/ossec/logs/ossec.log
>>> cp: /var/ossec/rules/ not found
>>> chown: unknown user id: root:ossec
>>> chmod: WARNING: can't access /var/ossec/rules
>>> chmod: WARNING: can't access /var/ossec/etc
>>> chown: unknown user id: root:ossec
>>> Usage: cp [-f] [-i] [-p] [-@] f1 f2
>>>         cp [-f] [-i] [-p] [-@] f1 ... fn d1
>>>         cp -r|-R [-H|-L|-P] [-f] [-i] [-p] [-@] d1 ... dn-1 dn
>>> chmod: WARNING: can't access /var/ossec/var/run
>>> chown: unknown user id: root:ossec
>>> cp: /var/ossec/bin/ not found
>>> cp: cannot create /var/ossec/bin/: No such file or directory
>>> cp: cannot create /var/ossec/bin/: No such file or directory
>>> cp: cannot create /var/ossec/bin/: No such file or directory
>>> cp: cannot create /var/ossec/bin/ossec-control: No such file or 
>>> directory
>>> cp: cannot create /var/ossec/etc/: No such file or directory
>>> cp: /var/ossec/etc/shared/ not found
>>> cp: /var/ossec/active-response/bin/ not found
>>> chmod: WARNING: can't access /var/ossec/active-response/bin/*
>>> Not overwritting /etc/ossec.conf.
>>> ------------------------------------------------------------
>>>
>>> bash-3.00# showrev
>>> Hostname: ossec-server
>>> Hostid: 83566709
>>> Release: 5.10
>>> Kernel architecture: sun4u
>>> Application architecture: sparc
>>> Hardware provider: Sun_Microsystems
>>> Domain:
>>> Kernel version: SunOS 5.10 Generic_118822-25
>>>
>>>
>>> Regards,
>>>
>>> Sebastian
>>
>>
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> ossec-list mailing list
> ossec-list at ossec.net
> http://mailman.underlinux.com.br/mailman/listinfo/ossec-list


OSSEC home | Main Index | Thread Index


OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.