Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 01 Jun 2007 17:20:47 -0500
From:      Paul Schmehl <pauls@utdallas.edu>
To:        ports@FreeBSD.org
Subject:   Re: FreeBSD Port: ossec-hids-client-1.2
Message-ID:  <728AC552D218624D58E828C2@utd59514.utdallas.edu>
In-Reply-To: <C2848A86.1224F2%astorms@ncircle.com>
References:  <C2848A86.1224F2%astorms@ncircle.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--==========B655E2242D09CBDA4A1A==========
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

--On Thursday, May 31, 2007 14:21:58 -0700 Andrew Storms=20
<astorms@ncircle.com> wrote:

> Reporting some problems.
>
> Based on how things got installed the start script at
> /usr/local/etc/rc.d/ossec-hids   Points to the wrong 'command' and
> 'required_files'.
>
>
> command=3D"/usr/local/bin/ossec-control"
> Whereas 'ossec-control' got installed at '/usr/local/ossec-hids/bin'
>
> And
> required_files=3D"/usr/local/etc/ossec.conf"
> The ossec.conf file was actually installed at =
'/usr/local/ossec-hids/etc'.
>
>
> I also noticed that even though one chooses to install
> ossec-hids-client-1.2 and not the server, what's actually installed is
> the server.  Though the ossec.conf file appears to be for a client, if
> one runs the 'manage-agents' binary you receive the options as if this
> was a server installation.  I honestly haven't dug into why this one is
> happening.  My guess would be something got missed in the Make options.
>
> Nonetheless, I'm excited to see a port for OSSEC.
>
I can't believe this port got committed.  There are three conf files in the =

source; server, client and local.  Only one is referenced in the master=20
Makefile and even *it* doesn't get installed because the syntax is=20
incorrect.

The startup script is useless as well.   That's just what I found in a=20
cursory examination.

This port needs a ton of work before it's ready to go into the tree.  I'll=20
see what I can do about submitting PRs over the weekend.

--=20
Paul Schmehl (pauls@utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

--==========B655E2242D09CBDA4A1A==========--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?728AC552D218624D58E828C2>