From OSSEC Wiki

Contents 1 Installing OSSEC Web UI on Mac OS X 1.1 Notes: 1.2 Prerequisites 1.3 Installation Procedures 1.3.1 Get the Web UI package 1.3.2 Uncompress/untar 1.3.3 Run the setup script 1.3.4 Add your web server user to the ossec group 1.3.4.1 10.5 and later 1.3.4.2 10.4.9 1.3.5 Restart Apache

Installing OSSEC Web UI on Mac OS X

Installation methods for Mac OS X differ significantly from those provided by the README that comes with the Web UI package. The following document provides instructions to help a Mac user set up OSSEC-WUI on Personal Web Server.

Notes:

This document has been patterned after the README file that comes with the Web UI package, as the steps to install it remain the same but take different forms under Mac OS X. You'll need be using at least Mac OS 10.4.9 or greater.

Prerequisites

In order to use the Web UI on Mac OS X, you will need the following things:

• Apache with PHP (>= 4.1 or >= 5.0)
  • Apache comes pre-installed on Mac OS X.
  • PHP... not so much. A number of documents that explain how to install PHP on Mac OS can be found on the Internet.
• OSSEC (version >= 0.9-3).

Installation Procedures

Get the Web UI package

Download the package from this location:

• http://www.ossec.net/files/ui/ossec-wui-0.3.tar.gz

The checksum and gpg signature are also available:

• http://www.ossec.net/files/ui/ossec-wui-0.3-checksum.txt
• http://www.ossec.net/files/ui/ossec-wui-0.3.tar.gz.sig

Uncompress/untar

Uncompress/untar and move the files to somewhere accessible by your web server. This can be done using Stuffit Expander, which comes with Mac OS X. I also recommend TheUnarchiver as an alternative to Stuffit Expander. To handle it manually, use the "tar" command from the Terminal with the following commands:

% tar -zxvf ossec-wui-0.2.tar.gz
% mv ossec-wui* /Library/WebServer/Documents/ossec-wui

Run the setup script

This portion will have to be done invariably from the Terminal. If you haven't opened it yet, it can be found in /Applications/Utilities.

% cd /Library/WebServer/Documents/ossec-wui
% ./setup.sh

Add your web server user to the ossec group

10.5 and later

In order to add the web server user to the ossec group under Mac OS 10.5 and later, type the following at the command prompt:

% dscl -u [username] -p . append /Groups/ossec GroupMembership _www

where [username] = your Mac short user login name.

10.4.9

If you are using Mac OS 10.4, follow these steps:

1. Open NetInfo Manager, located in /Applications/Utilities.
2. Choose "groups" in the first column, then "ossec" in the second column.
   • At the bottom it will display property information about the ossec group.
3. Select the users property.
4. In the Directory menu, choose Insert Value (or hit option-command-I).
5. Type "www" (without quotes) and then either press the enter or return key or click somewhere else in the window.
6. Finally, save your changes (command-S will do this).

Restart Apache

This must be done, also invariably, from the Sharing page in the System Preferences app, which you can reach either by clicking on the Apple Menu or by looking in the Applications folder. In the Services tab, choose Personal Web Sharing, and either uncheck the box beside it or click the Stop button that appears, and then click the same again when given the option.

Congratulations, you have just successfully installed the OSSEC Web UI on your Mac. :)  You can now access your information at
http://localhost/ossec-wui/

Don't forget about mac backup software