sudo /usr/sbin/groupadd osiris sudo /usr/sbin/useradd -g osiris -c "Osiris Daemon" -d /usr/local/osiris -s /bin/false osiris
cd src/ wget http://osiris.shmoo.com/data/osiris-4.2.1.tar.gz wget http://osiris.shmoo.com/data/osiris-4.2.1.tar.gz.md5 MD5ORIG=`awk '{print$2}' osiris-4.2.1.tar.gz.md5` MD5LOCAL=`md5sum osiris-4.2.1.tar.gz |awk '{print$1}'` if [ "$MD5ORIG" != "$MD5LOCAL" ]; then exit 1; fi gtar zxf osiris-4.2.1.tar.gz cd osiris-4.2.1/
OpenSSL のライブラリをスタティックリンクすること前提に configure ができているんだけども、例のごとく、Solaris 10 にはスタティックリンク用のライブラリ(libssl.a, libcrypt.a)がないので、コンパイル時にエラーになってしまう。
ダイナミックリンクするように configure を変更する。
vi configure
--- configure.old Fri Jul 28 10:23:18 2006 +++ configure Wed Aug 30 00:30:40 2006 @@ -3579,7 +3579,7 @@ case "$OS_NAME" in SunOS*) - LIBS="$saved_LIBS $ssldir/lib/libssl.a $ssldir/lib/libcrypto.a -lsocket -lnsl -lresolv" + LIBS="$saved_LIBS -lssl -lcrypto -lsocket -lnsl -lresolv" ;; CYGWIN*) LIBS="$saved_LIBS -lssl -lcrypto -lgdi32" @@ -3724,7 +3724,7 @@ case "$OS_NAME" in SunOS*) - LIBS="$saved_LIBS $ssldir/lib/libssl.a $ssldir/lib/libcrypto.a" + LIBS="$saved_LIBS -lssl -lcrypto" ;; MINGW*) LIBS="$saved_LIBS -lssl -lcrypto -mno-cygwin -lwsock32 -lnetapi32 -lgdi32 -liphlpapi -lpsapi"
./configure --prefix=/usr/local/osiris-4.2.1 --with-ssl-dir=/usr/sfw make sudo make install
Making install in src Making install in libosiris Making install in libfileapi Making install in libosirisdb Making install in libosirisctl Making install in libosirism Making install in db-4.2.52 Making install in build_unix Making install in osirisd Making install in modules ./genmods.sh ====================================== Found Scan Agent Modules: ==> mod_groups ==> mod_kmods ==> mod_ports ==> mod_users ====================================== for d in `/bin/ls -1 | grep mod_`; do if test -d $d; then cd ./$d; make module || exit 1; cd ..; fi; done ar cru libmodules.a *.o ranlib libmodules.a Making install in osirismd Making install in cli `install' is up to date. Build Successful! To create management console install package: 'make console' To create scan agent install package: 'make agent' Documentation is also online at: http://www.hostintegrity.com/osiris Continue with installation? (y/n) [y] [ENTER] Osiris Scanning Daemon Version 4.2.0-release*/ "4.2.0-release" for SunOS 5.10 Copyright (c) 2006 Brian Wotring. All Rights Reserved. This installation was configured and built to run as osiris agent user name: osiris management user name: osiris This installation was configured and built to use osiris agent root directory: /usr/local/osiris-4.2.1/osiris management root directory: /usr/local/osiris-4.2.1/osiris The username and directory will be created during the installation process if they do not already exist. By installing this product you agree that you have read the LICENSE file and will comply with its terms. --------------------------------------------------------------------- ==> using existing Osiris user. ==> using existing Osiris management console user. Install osiris agent? (y/n) [y] [ENTER] Install management console? (y/n) [y] [ENTER] Install CLI? (y/n) [y] [ENTER] Installation directory for binaries: [/usr/local/osiris-4.2.1/sbin] [ENTER] Installation directory doesn't exist, creating. ==> installed osiris CLI: /usr/local/osiris-4.2.1/sbin/osiris Osiris scan agent root directory doesn't exist, creating. ==> installed scan agent: /usr/local/osiris-4.2.1/sbin/osirisd ==> installed management console /usr/local/osiris-4.2.1/sbin/osirismd ==> installed default scan configs. ==> installing rc startup for daemon(s). ==> change owner and permissions on /usr/local/osiris-4.2.1/sbin/osiris -rwxr-xr-x 1 root other 1996244 Aug 30 00:53 /usr/local/osiris-4.2.1/sbin/osiris ==> change owner and permissions on /usr/local/osiris-4.2.1/sbin/osirisd -rwxr-xr-x 1 root other 724972 Aug 30 00:53 /usr/local/osiris-4.2.1/sbin/osirisd ==> change owner permissions on /usr/local/osiris-4.2.1/sbin/osirismd -rwsr-xr-x 1 osiris osiris 2334292 Aug 30 00:53 /usr/local/osiris-4.2.1/sbin/osirismd ================================================================== Osiris has been installed, but is not currently running. Startup scripts have been installed so that the necessary services will be started on boot. Start management console now? (y/n) [y] [ENTER] osirismd: missing configuration file, ==> created default in: /usr/local/osiris-4.2.1/osiris/osirismd.conf. unable to load server certificate (/usr/local/osiris-4.2.1/osiris/certs/osirismd.crt) ==> creating one. Generating RSA key, 2048 bit long modulus. ................................................................+++ ...................................+++ Start scan agent now? (y/n) [y] [ENTER] Documentation is included with this source and available online at: http://www.hostintegrity.com/osiris (c) 2006 - Brian Wotring
cd /usr/local/ sudo ln -s osiris-4.2.1 osiris
設定はまた後日ということで、、、(;´ρ`)チカレタヨ・・・