On Fri, Dec 5, 2014 at 11:28 AM, Tom Travis <[email protected]> wrote: > >> >> Depends on the daemon. Some are ossec, some are (one is?) ossecr, some >> are root. `ps auxww | grep ossec` > > > The reason I ask is because I want to get the ssh working to the router > without sending a password. I have this working for 'root', but > ossec is not running as root at this point and the ssh command is sitting > there waiting for a password to continue. Somehow I think I need > to copy key files in a .ssh directory for whatever user ossec is running as. > I am week on the whole issue of ssh and keys as I am sure you can > tell. >
Pretty sure execd runs as root. You can use the "-i" flag with ssh to tell it to use a particular key. >> >> >> >> >> Without looking at the script I'm guessing it doesn't want too many >> copies of the script to be modifying the firewall at the same time. >> It's easy to include a "lock" so that subsequent copies wait for the >> earlier copies to finish. Since you're going through a whole ssh >> session, I'm guessing each run of the script takes your system longer >> than most. >> >> It seems to run a lot better when I simply put both commands together in >> the one firewall-drop-sh script. > > >> >> >> > >> > If there is documentation on this, I would be happy to read it. Just >> > point >> > me there. >> > >> >> Have you looked at the script? I don't think it's documented, but I >> don't think it's very complex either. >> >> Yes, I am looking at the script and trying to understand. I was just >> hoping there might > > be some documentation that I could also look at. > > What do you want documented? I'll try to write something up if it makes sense. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
