Hello list,
We found that after installing an OSSEC agent on a Mac that it doesn't
automatically start on boot up. The solution implemented is
documented below.
Anyone else have a similar experience?
Create a directory named Ossec in /Library/StartupItems/
In that Directory there should be 2 files:
Ossec and StartupParameters.plist
The contents of Ossec are:
#!/bin/sh
ConsoleMessage "Starting Ossec"
cd /var/ossec; ./bin/ossec-control start
The contents of StartupParameters.plist are:
{
Description = "OSSEC HIDS";
Provides = ("Host Intrusion Detection");
}
The permissions on the Ossec File and directory should be 755 and the
permissions on StartupParameters.plist should be 644.
Trevor
