aboutsummaryrefslogtreecommitdiff
path: root/system
diff options
context:
space:
mode:
authorDavid Spencer <baildon.research@googlemail.com>2016-11-09 17:06:34 +0000
committerDavid Spencer <idlemoor@slackbuilds.org>2016-11-11 20:36:22 +0000
commit9beffd8789e903b05d576cc2e7f76ed08f7497be (patch)
treea65765a58e0b56f38fd2b85c36980518ebdccf0d /system
parentc5bed608309fa29d81b1820369ed0206567b5c75 (diff)
system/ossec-server: Fix exit status, add uid/gid info.
Signed-off-by: David Spencer <baildon.research@googlemail.com> Signed-off-by: David Spencer <idlemoor@slackbuilds.org>
Diffstat (limited to 'system')
-rw-r--r--system/ossec-server/README2
-rw-r--r--system/ossec-server/README.SLACKWARE8
-rw-r--r--system/ossec-server/ossec-server.SlackBuild6
3 files changed, 13 insertions, 3 deletions
diff --git a/system/ossec-server/README b/system/ossec-server/README
index 955a80fcad5a..f9733320313b 100644
--- a/system/ossec-server/README
+++ b/system/ossec-server/README
@@ -1,3 +1,5 @@
OSSEC is an Open Source Host-based Intrusion Detection System that performs log
analysis, file integrity checking, policy monitoring, rootkit detection,
real-time alerting and active response.
+
+See README.SLACKWARE for installation instructions.
diff --git a/system/ossec-server/README.SLACKWARE b/system/ossec-server/README.SLACKWARE
index e07808bfc66d..14aba4be39bc 100644
--- a/system/ossec-server/README.SLACKWARE
+++ b/system/ossec-server/README.SLACKWARE
@@ -1,3 +1,11 @@
+These users and group need to be added:
+
+ groupadd -g 333 ossec
+ useradd -u 333 -g 333 -d /var/ossec -s /bin/false ossec
+ useradd -u 334 -g 333 -d /var/ossec -s /bin/false ossecm
+ useradd -u 335 -g 333 -d /var/ossec -s /bin/false ossecr
+
+
You may wish to add these lines to /etc/rc.d/rc.local to start the service:
if [ -x /etc/rc.d/rc.ossec ]; then
diff --git a/system/ossec-server/ossec-server.SlackBuild b/system/ossec-server/ossec-server.SlackBuild
index 84fb6e79137f..d2a554b447a4 100644
--- a/system/ossec-server/ossec-server.SlackBuild
+++ b/system/ossec-server/ossec-server.SlackBuild
@@ -62,7 +62,7 @@ USERID_REMOTE=${USERID_REMOTE:-335}
GROUPID=${GROUPID:-333}
if ! grep ^ossec: /etc/group 2>&1 > /dev/null \
-|| ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then
+ || ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then
echo -e "\n You must have ossec users and a group to run this script\n"
fi
@@ -86,9 +86,9 @@ if ! grep ^ossecr: /etc/passwd 2>&1 > /dev/null; then
fi
if ! grep ^ossec: /etc/group 2>&1 > /dev/null \
-|| ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then
+ || ! grep -E '^(ossec|ossecm|ossecr):' /etc/passwd 2>&1 > /dev/null; then
echo
- exit
+ exit 1
fi
set -e