Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ossec-agentd is unable to unmerge files #869

Closed
ddpbsd opened this issue Jun 20, 2016 · 0 comments · Fixed by #870
Closed

ossec-agentd is unable to unmerge files #869

ddpbsd opened this issue Jun 20, 2016 · 0 comments · Fixed by #870

Comments

@ddpbsd
Copy link
Member

ddpbsd commented Jun 20, 2016

On a new agent installation of 2.9rc1, I get the following errors:

2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel_linux_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel6_linux_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/system_audit_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/rootkit_files.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_applications_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_debian_linux_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_audit_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel7_linux_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/cis_rhel5_linux_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/win_malware_rcl.txt'.
2016/06/20 16:09:28 ossec-agentd: ERROR: Unable to unmerge file '/etc/shared/rootkit_trojans.txt'.

I believe these files are installed read only (440):

install -m 0440 -o root -g ${OSSEC_GROUP} rootcheck/db/*.txt ${PREFIX}/etc/shared/

Should this be changed to 640?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant