Re: [ossec-list] remoted not starting

2016-02-20 Thread James Le Cuirot
Note that there is a pull request to fix this on GitHub. The initial attempt didn't work but the latest should. https://github.com/ossec/ossec-hids/pull/662 On Saturday, 20 February 2016 01:58:12 UTC, Santiago Bassett wrote: > > no, you need to restart the manager, after the first agent is

Re: [ossec-list] Re: Hacker or configuration error ?

2015-11-30 Thread James Le Cuirot
I don't know what's going on here but /proc is not a real directory and does not take up space on the disk. It is a virtual directory, maintained by the operating system, and the numbered directories directly within it will frequently change as they map to processes running on the system. On

[ossec-list] Re: running ossec-execd as nonroot working

2015-11-19 Thread James Le Cuirot
On Thursday, 21 May 2015 13:38:20 UTC+1, skotthof wrote: > > Hi, > > I having ossec-execd running as (new) user "ossece". > For the Latest Stable Release (2.8.1) > > On agent: > # ps aux | grep ossec > ossece 21669 0.0 0.0 12564 504 ?S10:57 0:00 >

Re: [ossec-list] Port 1514 Not Listening

2015-09-17 Thread James Le Cuirot
On Wednesday, 16 September 2015 21:15:14 UTC+1, Kat wrote: > > Just a silly question I don't see in this thread -- do you have ANY > clients defined on the server itself?? > > What is currently in /var/ossec/etc/clients.keys? > That's not a silly question at all, especially if authd is being

[ossec-list] Re: CentOS 7

2015-09-17 Thread James Le Cuirot
On Wednesday, 16 September 2015 10:07:20 UTC+1, Dillon Korman wrote: > > Is the CentOS 7 version coming soon? I only see 5 and 6. Also, does the > CentOS version work perfectly with RHEL? > A perfectly good CentOS 7 version is in the Atomic repository. It just isn't shown on the web site. For

Re: [ossec-list] Re: 2.8.2 and WUI in ossec channel repositories?

2015-07-27 Thread James Le Cuirot
On Sunday, 26 July 2015 00:09:34 UTC+1, Santiago Bassett wrote: Hi James, I didn't have time last week to work on this. Will let you know as soon as those are ready. The rpms are maintained by Atomicorp. Best No problem, I've put this aside for the moment but will come back to it in a

Re: [ossec-list] Re: New Debian and Ubuntu installers

2015-07-17 Thread James Le Cuirot
On Thursday, 16 July 2015 18:15:17 UTC+1, Santiago Bassett wrote: Happy to include ossec-batch-manager.pl in the package. Great! Regarding ossec users, they do not have a home directory. What user/s are used by the cookbook to drop the ssh key? I will modify the installer to make

Re: [ossec-list] Re: 2.8.2 and WUI in ossec channel repositories?

2015-07-16 Thread James Le Cuirot
On Monday, 13 July 2015 00:19:22 UTC+1, Santiago Bassett wrote: just released new Debian and Ubuntu packages version 2.8.2 with several fixes. Thanks Santiago. I will ensure the cookbook works with Debian and hopefully Ubuntu but from my own perspective, it is probably CentOS that I am

[ossec-list] Re: New Debian and Ubuntu installers

2015-07-16 Thread James Le Cuirot
On Monday, 13 July 2015 00:21:37 UTC+1, Santiago Bassett wrote: FYI. Just released those, version 2.8.2 with several fixes. Thanks again for these. I've been working on the cookbook and found that the RPMs include ossec-batch-manager.pl but the DEBs do not. We need this for the cookbook so

[ossec-list] Re: New Debian and Ubuntu installers

2015-07-16 Thread James Le Cuirot
On Thursday, 16 July 2015 16:27:03 UTC+1, James Le Cuirot wrote: On Monday, 13 July 2015 00:21:37 UTC+1, Santiago Bassett wrote: FYI. Just released those, version 2.8.2 with several fixes. Thanks again for these. I've been working on the cookbook and found that the RPMs include ossec

[ossec-list] Re: 2.8.2 and WUI in ossec channel repositories?

2015-07-10 Thread James Le Cuirot
On Friday, 10 July 2015 15:53:48 UTC+1, James Le Cuirot wrote: First of all, thanks for making RPMs and DEBs available, this is very helpful. I would like to get the ossec Chef cookbook using these rather than installing from source but 2.8.2 is missing from the ossec channel. The WUI

[ossec-list] Re: atomic gpg key issues

2015-07-10 Thread James Le Cuirot
On Friday, 10 July 2015 18:00:19 UTC+1, theresa mic-snare wrote: hi james, it worked fine for me just last week on my centos6 server i can't recall seeing this error regards, theresa Perhaps you are using the atomic repository rather than the ossec one? I'd like to use the latter