diff options
| author | David Spencer <baildon.research@googlemail.com> | 2016-11-09 17:05:56 +0000 |
|---|---|---|
| committer | David Spencer <idlemoor@slackbuilds.org> | 2016-11-11 20:36:22 +0000 |
| commit | a175ac8983b7f5e33773ca43091b27322776aed8 (patch) | |
| tree | 59dc6f6c9a9213b913f86e2f2cc078d98b3b06e5 | |
| parent | d50dc96bce019252df8d1ebb577a38507d264f45 (diff) | |
| download | slackbuilds-a175ac8983b7f5e33773ca43091b27322776aed8.tar.gz | |
system/ossec-agent: Fix exit status, add uid/gid info.
Signed-off-by: David Spencer <baildon.research@googlemail.com>
Signed-off-by: David Spencer <idlemoor@slackbuilds.org>
| -rw-r--r-- | system/ossec-agent/README | 2 | ||||
| -rw-r--r-- | system/ossec-agent/README.SLACKWARE | 8 | ||||
| -rw-r--r-- | system/ossec-agent/ossec-agent.SlackBuild | 6 |
3 files changed, 13 insertions, 3 deletions
diff --git a/system/ossec-agent/README b/system/ossec-agent/README index 955a80fcad..f973332031 100644 --- a/system/ossec-agent/README +++ b/system/ossec-agent/README @@ -1,3 +1,5 @@ OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. + +See README.SLACKWARE for installation instructions. diff --git a/system/ossec-agent/README.SLACKWARE b/system/ossec-agent/README.SLACKWARE index e07808bfc6..14aba4be39 100644 --- a/system/ossec-agent/README.SLACKWARE +++ b/system/ossec-agent/README.SLACKWARE @@ -1,3 +1,11 @@ +These users and group need to be added: + + groupadd -g 333 ossec + useradd -u 333 -g 333 -d /var/ossec -s /bin/false ossec + useradd -u 334 -g 333 -d /var/ossec -s /bin/false ossecm + useradd -u 335 -g 333 -d /var/ossec -s /bin/false ossecr + + You may wish to add these lines to /etc/rc.d/rc.local to start the service: if [ -x /etc/rc.d/rc.ossec ]; then diff --git a/system/ossec-agent/ossec-agent.SlackBuild b/system/ossec-agent/ossec-agent.SlackBuild index 8522b3143f..988fb3ee2d 100644 --- a/system/ossec-agent/ossec-agent.SlackBuild +++ b/system/ossec-agent/ossec-agent.SlackBuild @@ -62,7 +62,7 @@ USERID_REMOTE=${USERID_REMOTE:-335} GROUPID=${GROUPID:-333} if ! grep ^ossec: /etc/group 2>&1 > /dev/null \ -|| ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then + || ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then echo -e "\n You must have ossec users and a group to run this script\n" fi @@ -86,9 +86,9 @@ if ! grep ^ossecr: /etc/passwd 2>&1 > /dev/null; then fi if ! grep ^ossec: /etc/group 2>&1 > /dev/null \ -|| ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then + || ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then echo - exit + exit 1 fi set -e |