On Thu, Aug 23, 2012 at 12:05 AM, Christopher Werby <[email protected]> wrote: > Hi Ryan, > > Sure! > >> root@XXX:/tmp/ossec-hids-2.6/src/analysisd/compiled_rules# /bin/sh -x >> register_rule.sh build >> + CHF=compiled_rules.h >> + ls -la register_rule.sh >> + '[' '!' 0 = 0 ']' >> + '[' xbuild = x -o xbuild = xhelp -o xbuild = x-h ']' >> + '[' xbuild = xlist ']' >> + '[' xbuild = xsave ']' >> + '[' xbuild = xrestore ']' >> + '[' xbuild = xbuild ']' >> + ls -la .function_list >> + '[' '!' 0 = 0 ']' >> + echo '/* This file is auto generated by register_rule.sh. Do not touch it. >> */' >> + echo '' >> + echo '/* Adding the function definitions. */' >> ++ cat .function_list >> ++ sort >> ++ uniq >> + for i in '`cat .function_list | sort| uniq`' >> + echo 'void *check_id_size(Eventinfo *lf);' >> + for i in '`cat .function_list | sort| uniq`' >> + echo 'void *comp_mswin_targetuser_calleruser_diff(Eventinfo *lf);' >> + for i in '`cat .function_list | sort| uniq`' >> + echo 'void *comp_srcuser_dstuser(Eventinfo *lf);' >> + for i in '`cat .function_list | sort| uniq`' >> + echo 'void *is_simple_http_request(Eventinfo *lf);' >> + for i in '`cat .function_list | sort| uniq`' >> + echo 'void *is_valid_crawler(Eventinfo *lf);' >> + echo '' >> + echo '/* Adding the rules list. */' >> + echo 'void *(compiled_rules_list[]) = ' >> + echo '{' >> ++ cat .function_list >> ++ sort >> ++ uniq >> + for i in '`cat .function_list | sort| uniq`' >> + echo ' check_id_size,' >> + for i in '`cat .function_list | sort| uniq`' >> + echo ' comp_mswin_targetuser_calleruser_diff,' >> + for i in '`cat .function_list | sort| uniq`' >> + echo ' comp_srcuser_dstuser,' >> + for i in '`cat .function_list | sort| uniq`' >> + echo ' is_simple_http_request,' >> + for i in '`cat .function_list | sort| uniq`' >> + echo ' is_valid_crawler,' >> + echo ' NULL' >> + echo '};' >> + echo '' >> + echo '/* Adding the rules list names. */' >> + echo 'char *(compiled_rules_name[]) = ' >> + echo '{' >> ++ cat .function_list >> ++ sort >> ++ uniq >> + for i in '`cat .function_list |sort | uniq`' >> + echo ' "check_id_size",' >> + for i in '`cat .function_list |sort | uniq`' >> + echo ' "comp_mswin_targetuser_calleruser_diff",' >> + for i in '`cat .function_list |sort | uniq`' >> + echo ' "comp_srcuser_dstuser",' >> + for i in '`cat .function_list |sort | uniq`' >> + echo ' "is_simple_http_request",' >> + for i in '`cat .function_list |sort | uniq`' >> + echo ' "is_valid_crawler",' >> + echo ' NULL' >> + echo '};' >> + echo '' >> + echo '/* EOF */' >> + echo '*Build completed.' >> *Build completed. > > ----------------------- > Christopher Werby > Pipsqueak Productions, LLC > http://www.Pipsqueak.com > > On Aug 22, 2012, at 8:44 PM, Ryan Schulze wrote: > >> /bin/sh -x register_rule.sh build >
Ok, that seems to have worked. The only other thing it does is tries to compile. Try running `make plugins` in that directory. I guess you could also check the permissions of the directory itself. I've never seen issues with this before.
