Hi, i have changed: USER and Group variable values in: ossec-hids-2.8.1/src/InstallAgent.sh and InstallServer.sh
and in ".../src/headers" following vars: #define USER #define GROUPGLOBAL On Monday, December 1, 2014 3:39:42 PM UTC+1, dan (ddpbsd) wrote: > > On Mon, Dec 1, 2014 at 9:26 AM, Philipp Hoferichter <[email protected] > <javascript:>> wrote: > > Hi, > > > > i have tried to change the code, for the old version we´ve used (2.6 ... > ) > > this works fine, for the new one: 2.8.1 the analysisd fails to start: > > ./ossec-analysisd > > 2014/12/01 15:22:37 Could not get ossec gid. > > 2014/12/01 15:22:37 ossec-config(1202): ERROR: Configuration error at > > '/lfs/ossec/etc/ossec.conf'. Exiting. > > 2014/12/01 15:22:37 ossec-analysisd(1202): ERROR: Configuration error at > > '/lfs/ossec/etc/ossec.conf'. Exiting. > > > > Problem is the acitve-response.c, but i can`t find the fix at the moment > :): > > > > struct group *os_group; > > if((os_group = getgrnam(USER)) == NULL) > > { > > merror("Could not get ossec gid."); > > fclose(fp); > > return(-1); > > } > > > > > > Without knowing what you've changed I don't really know how to help. > I've never seen a need to mess in this area. > > > > > > > > > On Monday, December 1, 2014 1:03:46 PM UTC+1, Philipp Hoferichter wrote: > >> > >> Hello Together, > >> > >> is it possible to change the default User and Group for ossec? > >> > >> Standard Accounts are defined in the InstallServer.sh, InstallAgent.sh > and > >> named ossec. > >> Is there a way to change this default accounts? > >> > >> best regards > >> > >> philipp > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
