--- ./src/InstallServer.sh.orig 2014-05-22 07:10:57.000000000 -0600 +++ ./src/InstallServer.sh 2014-07-13 15:24:45.552390120 -0600 @@ -44,13 +44,13 @@ # Creating groups/users if [ "$UNAME" = "FreeBSD" -o "$UNAME" = "DragonFly" ]; then - grep "^${USER_REM}" /etc/passwd > /dev/null 2>&1 - if [ ! $? = 0 ]; then - /usr/sbin/pw groupadd ${GROUP} - /usr/sbin/pw useradd ${USER} -d ${DIR} -s /sbin/nologin -g ${GROUP} - /usr/sbin/pw useradd ${USER_MAIL} -d ${DIR} -s /sbin/nologin -g ${GROUP} - /usr/sbin/pw useradd ${USER_REM} -d ${DIR} -s /sbin/nologin -g ${GROUP} - fi +# grep "^${USER_REM}" /etc/passwd > /dev/null 2>&1 +# if [ ! $? = 0 ]; then +# /usr/sbin/pw groupadd ${GROUP} +# /usr/sbin/pw useradd ${USER} -d ${DIR} -s /sbin/nologin -g ${GROUP} +# /usr/sbin/pw useradd ${USER_MAIL} -d ${DIR} -s /sbin/nologin -g ${GROUP} +# /usr/sbin/pw useradd ${USER_REM} -d ${DIR} -s /sbin/nologin -g ${GROUP} +# fi elif [ "$UNAME" = "SunOS" ]; then grep "^${USER_REM}" /etc/passwd > /dev/null 2>&1 @@ -123,61 +123,61 @@ # Default for all directories chmod 550 ${DIR} chmod 550 ${DIR}/* -chown root:${GROUP} ${DIR} -chown root:${GROUP} ${DIR}/* +#chown root:${GROUP} ${DIR} +#chown root:${GROUP} ${DIR}/* # AnalysisD needs to write to alerts: log, mail and cmds -chown -R ${USER}:${GROUP} ${DIR}/queue/alerts +#chown -R ${USER}:${GROUP} ${DIR}/queue/alerts chmod -R 770 ${DIR}/queue/alerts # To the ossec queue (default for analysisd to read) -chown -R ${USER}:${GROUP} ${DIR}/queue/ossec +#chown -R ${USER}:${GROUP} ${DIR}/queue/ossec chmod -R 770 ${DIR}/queue/ossec # To the ossec fts queue -chown -R ${USER}:${GROUP} ${DIR}/queue/fts +#chown -R ${USER}:${GROUP} ${DIR}/queue/fts chmod -R 750 ${DIR}/queue/fts chmod 750 ${DIR}/queue/fts/* > /dev/null 2>&1 # To the ossec syscheck/rootcheck queue -chown -R ${USER}:${GROUP} ${DIR}/queue/syscheck +#chown -R ${USER}:${GROUP} ${DIR}/queue/syscheck chmod -R 750 ${DIR}/queue/syscheck chmod 740 ${DIR}/queue/syscheck/* > /dev/null 2>&1 -chown -R ${USER}:${GROUP} ${DIR}/queue/rootcheck +#chown -R ${USER}:${GROUP} ${DIR}/queue/rootcheck chmod -R 750 ${DIR}/queue/rootcheck chmod 740 ${DIR}/queue/rootcheck/* > /dev/null 2>&1 -chown ${USER}:${GROUP} ${DIR}/queue/diff -chown ${USER}:${GROUP} ${DIR}/queue/diff/* > /dev/null 2>&1 +#chown ${USER}:${GROUP} ${DIR}/queue/diff +#chown ${USER}:${GROUP} ${DIR}/queue/diff/* > /dev/null 2>&1 chmod 750 ${DIR}/queue/diff chmod 740 ${DIR}/queue/diff/* > /dev/null 2>&1 -chown -R ${USER_REM}:${GROUP} ${DIR}/queue/agent-info +#chown -R ${USER_REM}:${GROUP} ${DIR}/queue/agent-info chmod -R 750 ${DIR}/queue/agent-info chmod 740 ${DIR}/queue/agent-info/* > /dev/null 2>&1 -chown -R ${USER_REM}:${GROUP} ${DIR}/queue/rids +#chown -R ${USER_REM}:${GROUP} ${DIR}/queue/rids chmod -R 750 ${DIR}/queue/rids chmod 740 ${DIR}/queue/rids/* > /dev/null 2>&1 -chown -R ${USER}:${GROUP} ${DIR}/queue/agentless +#chown -R ${USER}:${GROUP} ${DIR}/queue/agentless chmod -R 750 ${DIR}/queue/agentless chmod 740 ${DIR}/queue/agentless/* > /dev/null 2>&1 # For the stats directory -chown -R ${USER}:${GROUP} ${DIR}/stats +#chown -R ${USER}:${GROUP} ${DIR}/stats chmod -R 750 ${DIR}/stats # For the logging user -chown -R ${USER}:${GROUP} ${DIR}/logs +#chown -R ${USER}:${GROUP} ${DIR}/logs chmod -R 750 ${DIR}/logs touch ${DIR}/logs/ossec.log -chown ${USER}:${GROUP} ${DIR}/logs/ossec.log +#chown ${USER}:${GROUP} ${DIR}/logs/ossec.log chmod 660 ${DIR}/logs/ossec.log touch ${DIR}/logs/active-responses.log -chown ${USER}:${GROUP} ${DIR}/logs/active-responses.log +#chown ${USER}:${GROUP} ${DIR}/logs/active-responses.log chmod 660 ${DIR}/logs/active-responses.log # For the rules directory @@ -195,7 +195,7 @@ fi fi -cp -pr ../etc/rules/* ${DIR}/rules/ +cp -pr ../etc/rules/*.xml ${DIR}/rules/ find ${DIR}/rules/ -type f -exec chmod 440 {} \; # If the local_rules is saved, moved it back @@ -204,18 +204,18 @@ mv ${DIR}/rules/saved_local_rules.xml.$$ ${DIR}/rules/local_rules.xml fi -chown -R root:${GROUP} ${DIR}/rules +#chown -R root:${GROUP} ${DIR}/rules chmod -R 550 ${DIR}/rules # For the etc dir chmod 550 ${DIR}/etc -chown -R root:${GROUP} ${DIR}/etc +#chown -R root:${GROUP} ${DIR}/etc ls /etc/localtime > /dev/null 2>&1 if [ $? = 0 ]; then cp -pL /etc/localtime ${DIR}/etc/; chmod 440 ${DIR}/etc/localtime - chown root:${GROUP} ${DIR}/etc/localtime + #chown root:${GROUP} ${DIR}/etc/localtime fi # Solaris Needs some extra files @@ -234,7 +234,7 @@ # For the /var/run chmod 770 ${DIR}/var/run -chown root:${GROUP} ${DIR}/var/run +#chown root:${GROUP} ${DIR}/var/run # Moving the binary files cp -pr addagent/manage_agents agentlessd/ossec-agentlessd \ @@ -257,7 +257,7 @@ cp -pr external/lua/src/ossec-lua ${DIR}/bin/ cp -pr external/lua/src/ossec-luac ${DIR}/bin/ cp -pr ../contrib/util.sh ${DIR}/bin/ -chown root:${GROUP} ${DIR}/bin/util.sh +#chown root:${GROUP} ${DIR}/bin/util.sh chmod +x ${DIR}/bin/util.sh # Local install chosen @@ -287,14 +287,14 @@ cp -pr ../etc/internal_options.conf ${DIR}/etc/ cp -pr rootcheck/db/*.txt ${DIR}/etc/shared/ -chown root:${GROUP} ${DIR}/etc/decoder.xml -chown root:${GROUP} ${DIR}/etc/local_decoder.xml >/dev/null 2>&1 -chown root:${GROUP} ${DIR}/etc/internal_options.conf -chown root:${GROUP} ${DIR}/etc/local_internal_options.conf >/dev/null 2>&1 -chown root:${GROUP} ${DIR}/etc/client.keys >/dev/null 2>&1 -chown root:${GROUP} ${DIR}/etc/shared/* -chown root:${GROUP} ${DIR}/agentless/* -chown ${USER}:${GROUP} ${DIR}/.ssh +#chown root:${GROUP} ${DIR}/etc/decoder.xml +#chown root:${GROUP} ${DIR}/etc/local_decoder.xml >/dev/null 2>&1 +#chown root:${GROUP} ${DIR}/etc/internal_options.conf +#chown root:${GROUP} ${DIR}/etc/local_internal_options.conf >/dev/null 2>&1 +#chown root:${GROUP} ${DIR}/etc/client.keys >/dev/null 2>&1 +#chown root:${GROUP} ${DIR}/etc/shared/* +#chown root:${GROUP} ${DIR}/agentless/* +#chown ${USER}:${GROUP} ${DIR}/.ssh chmod 440 ${DIR}/etc/decoder.xml chmod 440 ${DIR}/etc/local_decoder.xml >/dev/null 2>&1 chmod 440 ${DIR}/etc/internal_options.conf @@ -314,9 +314,9 @@ cp -p ../active-response/firewalls/*.sh ${DIR}/active-response/bin/ chmod 550 ${DIR}/active-response/bin/* -chown root:${GROUP} ${DIR}/active-response/bin/* +#chown root:${GROUP} ${DIR}/active-response/bin/* -chown root:${GROUP} ${DIR}/bin/* +#chown root:${GROUP} ${DIR}/bin/* chmod 550 ${DIR}/bin/* @@ -328,12 +328,12 @@ ls ../etc/ossec.mc > /dev/null 2>&1 if [ $? = 0 ]; then - cp -pr ../etc/ossec.mc ${DIR}/etc/ossec.conf + cp -pr ../etc/ossec.mc ${DIR}/etc/ossec.conf.sample else - cp -pr ../etc/ossec-server.conf ${DIR}/etc/ossec.conf + cp -pr ../etc/ossec-server.conf ${DIR}/etc/ossec.conf.sample fi -chown root:${GROUP} ${DIR}/etc/ossec.conf -chmod 440 ${DIR}/etc/ossec.conf +#chown root:${GROUP} ${DIR}/etc/ossec.conf.sample +chmod 440 ${DIR}/etc/ossec.conf.sample