Dear Artien,
I have checked that the SELINUX is disabled via the
command getenforce.So what else can I check?
Regards,
Frwa.
On Friday, January 31, 2014 10:28:24 PM UTC+8, Artien Bel wrote:
>
>
> >> still left there 2014/01/31 16:18:01 ossec-analysisd(1210): ERROR:
> Queue
> >> '/queue/alerts/ar' not accessible: 'Connection refused'.
> >> 2014/01/31 16:18:01 ossec-analysisd(1301): ERROR: Unable to connect to
> >> active response queue. Are they suppose to be waiting for some agents?
> Thank
> >> you very much for the support and kind help.
> >>
> > I'm not sure why you are getting that error. I'd make sure ossec-execd
> > is running on the OSSEC server, check permissions of the files in
> > question, and restart the processes. Maybe you don't have AR setup for
> > the server?
> >
> Perhaps it might be a SELinux issue? I've had issues on CentOS 6 with
> it. Try check /var/log/audit/audit.log if it's in enforcing mode. A
> quick way to test is "setenforce 0" and try again, if it works then
> SELinux isn't configured right.
>
> Cheers,
>
> Artien
>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
