I want to create (or otherwise obtain) an RPM for an ossec local installation, but am a little lost regarding what I need. OSSEC docs list 3 installation modes: local, agent/client and server. RPM specfiles all build 3 packages:
- ossec-hids - ossec-hids-server - ossec-hids-client My assumption was that the first package would give me my local installation, but this does not appear to be the case as there is no app binary. So I'm trying to figure what else I need for a local installation as I don't want to bloat my systems up with unnecessary packages that are required for a full-on server deployment. Can anyone tell me what I need and what I can forego to get a local installation? Thx. todd
