Hi,

I am having problems access ossec directory when trying to use the web
I receive the error message from my browser.

""Unable to access ossec directory"

I can access the webserver from
http://138.202.80.161/ossec-wui/index.php?f=s

and I am able to see the tabs where
Main, Search, Integrity Checking, Stats, About..

am I missing something..

Note: I installed ossec under a diff partition using LVM
/var2

all is working well, except the web..

Any recommendations? am I missing something.
your help is greatly appreciated.

Thanks.

David Juarez

I decompresse/untar ossec-wui-0.3.tar.gz.
mv mv ossec-wui* /var/www/html/ossec-wui


[root@syslog-rhel63-svr html]# pwd
/var/www/html
[root@syslog-rhel63-svr html]# ls -l
total 4
drwxr-xr-x. 8 root ossec 4096 May  9 17:08 ossec-wui
[root@syslog-rhel63-svr html]# ls -l ossec-wui/
total 92
-rwxr-xr-x. 1 root ossec   317 May  9 17:08 CONTRIB
drwxr-xr-x. 3 root ossec  4096 May  9 17:08 css
-rw-r--r--. 1 root ossec   218 May  9 17:08 htaccess_def.txt
drwxr-xr-x. 2 root ossec  4096 May  9 17:08 img
-rwxr-xr-x. 1 root ossec  5177 May  9 17:08 index.php
drwxr-xr-x. 2 root ossec  4096 May  9 17:08 js
drwxr-xr-x. 3 root ossec  4096 May  9 17:08 lib
-rw-r--r--. 1 root ossec 35745 May  9 17:08 LICENSE
-rw-r--r--. 1 root ossec   462 May  9 17:08 ossec_conf.php
-rw-r--r--. 1 root ossec  1449 May  9 17:08 README
-rw-r--r--. 1 root ossec   923 May  9 17:08 README.search
-rwxr-xr-x. 1 root ossec  1824 May  9 17:08 setup.sh
drwxr-xr-x. 2 root ossec  4096 May 10 12:30 site
drwxrwxrwx. 2 root ossec  4096 May  9 17:08 tmp


ran the setup.sh script created 3 users apache, and nobody

[root@syslog-rhel63-svr html]# grep ossec /etc/group
ossec:x:502:apache,nobody
[root@syslog-rhel63-svr html]#


Fix permissions
# chmod 770 tmp/
    # chgrp www-data tmp/
    # apachectl restart


[root@syslog-rhel63-svr html]# service httpd status
httpd (pid  13291) is running...
[root@syslog-rhel63-svr html]# ps -ef | grep httpd
root     13291     1  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13293 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13294 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13295 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13296 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13297 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13298 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13299 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13300 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
apache   13301 13291  0 12:40 ?        00:00:00 /usr/sbin/httpd
root     13388 10691  0 12:55 pts/2    00:00:00 grep httpd
[root@syslog-rhel63-svr html]#


[root@syslog-rhel63-svr html]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3              51G  6.0G   43G  13% /
tmpfs                 1.9G   72K  1.9G   1% /dev/shm
/dev/sda1             243M   59M  172M  26% /boot
/dev/mapper/vg--ossec-lv--ossec
                      197G  232M  187G   1% /var2
[root@syslog-rhel63-svr html]#


[root@syslog-rhel63-svr html]# ls -ld /var2/ossec/
dr-xr-x---. 13 root ossec 4096 May  9 15:01 /var2/ossec/


[root@syslog-rhel63-svr html]# ls -l /var2
total 24
drwx------.  2 root root  16384 May  9 14:30 lost+found
dr-xr-x---. 13 root ossec  4096 May  9 15:01 ossec
drwxr-xr-x.  4 root root   4096 May  9 16:57 software
[root@syslog-rhel63-svr html]# ls -ld /var2/ossec/
dr-xr-x---. 13 root ossec 4096 May  9 15:01 /var2/ossec/
[root@syslog-rhel63-svr html]# ls -l /var2/ossec/
total 40
dr-xr-x---.  3 root  ossec 4096 May  9 15:01 active-response
dr-xr-x---.  2 root  ossec 4096 May  9 15:01 agentless
dr-xr-x---.  2 root  ossec 4096 May  9 15:01 bin
dr-xr-x---.  3 root  ossec 4096 May  9 15:21 etc
drwxr-x---.  5 ossec ossec 4096 May  9 15:01 logs
dr-xr-x---. 11 root  ossec 4096 May  9 15:01 queue
dr-xr-x---.  4 root  ossec 4096 May  9 15:01 rules
drwxr-x---.  5 ossec ossec 4096 May  9 15:01 stats
drwxrwx---.  2 root  ossec 4096 May  9 15:01 tmp
dr-xr-x---.  3 root  ossec 4096 May  9 15:22 var
[root@syslog-rhel63-svr html]#

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to