We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
On a new agent installation of 2.9rc1, I get the following errors:
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel_linux_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel6_linux_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/system_audit_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/rootkit_files.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_applications_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_debian_linux_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_audit_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel7_linux_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel5_linux_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_malware_rcl.txt'. 2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/rootkit_trojans.txt'.
I believe these files are installed read only (440):
install -m 0440 -o root -g ${OSSEC_GROUP} rootcheck/db/*.txt ${PREFIX}/etc/shared/
Should this be changed to 640?
The text was updated successfully, but these errors were encountered:
Adjust the permissions of the etc/shared files so agentd can overwrite
9bbf317
them. Should fix ossec#869.
19a0b85
Successfully merging a pull request may close this issue.
On a new agent installation of 2.9rc1, I get the following errors:
I believe these files are installed read only (440):
Should this be changed to 640?
The text was updated successfully, but these errors were encountered: