Skip site navigation (1)Skip section navigation (2) 
Date:      Fri, 14 Aug 2020 13:24:57 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 248656] security/wazuh-agent:  ossec-syscheckd fails with '/var/ossec/queue/fim/db/fim.db': unable to open database file
Message-ID:  <bug-248656-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D248656

            Bug ID: 248656
           Summary: security/wazuh-agent:  ossec-syscheckd fails with
                    '/var/ossec/queue/fim/db/fim.db': unable to open
                    database file
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: fzipitria@perceptyx.com
                CC: m.muenz@gmail.com
                CC: m.muenz@gmail.com
             Flags: maintainer-feedback?(m.muenz@gmail.com)

root@<myhost>:/var/ossec # tail logs/ossec.log=20
2020/08/13 12:59:22 ossec-syscheckd: INFO: (6206): Ignore 'file' entry
'/var/ossec/var'
2020/08/13 12:59:22 ossec-syscheckd: INFO: (6206): Ignore 'file' entry
'/var/ossec/tmp'
2020/08/13 12:59:22 ossec-syscheckd: INFO: (6206): Ignore 'file' entry
'/var/ossec/stats'
2020/08/13 12:59:22 ossec-syscheckd: INFO: (6207): Ignore 'file' sregex
'.log$|.swp$'
2020/08/13 12:59:22 ossec-syscheckd: ERROR: Couldn't create SQLite database
'/var/ossec/queue/fim/db/fim.db': unable to open database file
2020/08/13 12:59:22 ossec-syscheckd: CRITICAL: (6698): Creating Data Struct=
ure:
sqlite3 db. Exiting.
2020/08/13 12:59:51 ossec-agentd: INFO: Agent is restarting due to shared
configuration changes.
2020/08/13 12:59:52 ossec-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)]
Received. Exit Cleaning...
2020/08/13 12:59:52 ossec-execd: INFO: (1314): Shutdown received. Deleting
responses.
2020/08/13 12:59:52 ossec-execd: INFO: (1225): SIGNAL [(15)-(Terminated)]
Received. Exit Cleaning...

Creating the directory solves this problem:

mkdir -p /var/ossec/queue/fim/db
chown -R ossec:ossec /var/ossec/queue/fim

So I guess this could be done by the package itself. Will send a patch.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-248656-7788>