On Thu, Aug 23, 2012 at 11:52 AM, Christopher Werby <cwe...@pipsqueak.com> wrote: > Hi Dan, > > Here's the "Error 127" that I get when I execute `make plugins`. I also show > the PATH on my system and the permissions on compiled_rules/ (775). > >> root@xxx:/tmp/ossec-hids-2.6/src/analysisd/compiled_rules# echo $PATH >> /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin >> root@xxx:/tmp/ossec-hids-2.6/src/analysisd# stat compiled_rules/ >> File: `compiled_rules/' >> Size: 140 Blocks: 0 IO Block: 4096 directory >> Device: 35h/53d Inode: 1928226602 Links: 2 >> Access: (0775/drwxrwxr-x) Uid: ( 500/ UNKNOWN) Gid: ( 500/ UNKNOWN)
Are you sure you can write to this dir? Does UID 500 exist? What happens if you chown it to root? Shots in the dark: Make sure selinux or anything like that isn't messing this up. Make sure the mount options aren't causing issues. >> Access: 2012-08-23 08:35:04.630335120 -0700 >> Modify: 2012-08-22 21:04:28.287611426 -0700 >> Change: 2012-08-22 21:04:28.287611426 -0700 >> root@xxx:/tmp/ossec-hids-2.6/src/analysisd# cd compiled_rules/ >> root@xxx:/tmp/ossec-hids-2.6/src/analysisd/compiled_rules# make plugins >> ./register_rule.sh build >> make: execvp: ./register_rule.sh: Permission denied >> make: *** [plugins] Error 127 > > > Best, > ----------------------- > Christopher Werby > Pipsqueak Productions, LLC > http://www.Pipsqueak.com > > On Aug 23, 2012, at 6:33 AM, dan (ddp) wrote: > >> On Thu, Aug 23, 2012 at 12:05 AM, Christopher Werby >> <cwe...@pipsqueak.com> wrote: >>> Hi Ryan, >>> >>> Sure! >>> >>>> root@XXX:/tmp/ossec-hids-2.6/src/analysisd/compiled_rules# /bin/sh -x >>>> register_rule.sh build >>>> + CHF=compiled_rules.h >>>> + ls -la register_rule.sh >>>> + '[' '!' 0 = 0 ']' >>>> + '[' xbuild = x -o xbuild = xhelp -o xbuild = x-h ']' >>>> + '[' xbuild = xlist ']' >>>> + '[' xbuild = xsave ']' >>>> + '[' xbuild = xrestore ']' >>>> + '[' xbuild = xbuild ']' >>>> + ls -la .function_list >>>> + '[' '!' 0 = 0 ']' >>>> + echo '/* This file is auto generated by register_rule.sh. Do not touch >>>> it. */' >>>> + echo '' >>>> + echo '/* Adding the function definitions. */' >>>> ++ cat .function_list >>>> ++ sort >>>> ++ uniq >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo 'void *check_id_size(Eventinfo *lf);' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo 'void *comp_mswin_targetuser_calleruser_diff(Eventinfo *lf);' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo 'void *comp_srcuser_dstuser(Eventinfo *lf);' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo 'void *is_simple_http_request(Eventinfo *lf);' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo 'void *is_valid_crawler(Eventinfo *lf);' >>>> + echo '' >>>> + echo '/* Adding the rules list. */' >>>> + echo 'void *(compiled_rules_list[]) = ' >>>> + echo '{' >>>> ++ cat .function_list >>>> ++ sort >>>> ++ uniq >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo ' check_id_size,' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo ' comp_mswin_targetuser_calleruser_diff,' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo ' comp_srcuser_dstuser,' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo ' is_simple_http_request,' >>>> + for i in '`cat .function_list | sort| uniq`' >>>> + echo ' is_valid_crawler,' >>>> + echo ' NULL' >>>> + echo '};' >>>> + echo '' >>>> + echo '/* Adding the rules list names. */' >>>> + echo 'char *(compiled_rules_name[]) = ' >>>> + echo '{' >>>> ++ cat .function_list >>>> ++ sort >>>> ++ uniq >>>> + for i in '`cat .function_list |sort | uniq`' >>>> + echo ' "check_id_size",' >>>> + for i in '`cat .function_list |sort | uniq`' >>>> + echo ' "comp_mswin_targetuser_calleruser_diff",' >>>> + for i in '`cat .function_list |sort | uniq`' >>>> + echo ' "comp_srcuser_dstuser",' >>>> + for i in '`cat .function_list |sort | uniq`' >>>> + echo ' "is_simple_http_request",' >>>> + for i in '`cat .function_list |sort | uniq`' >>>> + echo ' "is_valid_crawler",' >>>> + echo ' NULL' >>>> + echo '};' >>>> + echo '' >>>> + echo '/* EOF */' >>>> + echo '*Build completed.' >>>> *Build completed. >>> >>> ----------------------- >>> Christopher Werby >>> Pipsqueak Productions, LLC >>> http://www.Pipsqueak.com >>> >>> On Aug 22, 2012, at 8:44 PM, Ryan Schulze wrote: >>> >>>> /bin/sh -x register_rule.sh build >>> >> >> Ok, that seems to have worked. The only other thing it does is tries >> to compile. Try running `make plugins` in that directory. >> I guess you could also check the permissions of the directory itself. >> I've never seen issues with this before. >
