Not its not a trick question ;) I thought it goes maybe automatically but every fresh installation gets the standard ossec.conf.
Am Dienstag, 22. Juli 2014 17:52:09 UTC+2 schrieb dan (ddpbsd): > > On Tue, Jul 22, 2014 at 11:47 AM, Alexander Pietrasch > <[email protected] <javascript:>> wrote: > > Sure thats true, but after an fresh installation. How do i give the > agent > > ossec.conf the following line? > > > > <config-profile>testx</config-profile> > > > > Add it to the ossec.conf? Is this a trick question? > > > > > > > Am Dienstag, 22. Juli 2014 16:02:58 UTC+2 schrieb dan (ddpbsd): > >> > >> On Tue, Jul 22, 2014 at 9:54 AM, Alexander Pietrasch > >> <[email protected]> wrote: > >> > The Config gets generated at the following path: > >> > > >> > {$DOWNLOADDIR}/ossec-hids-2.8/src/config/ > >> > > >> > there are three files for the agent config: > >> > client-config.c > >> > client-config.h > >> > client-config.o > >> > > >> > >> Those are the source code and what not controlling host OSSEC uses the > >> configuration file. If you want a custom ossec.conf to be installed > >> during compilation, those aren't the files you need to modify. > >> > >> > I checked out to fill the ossec.conf autmatically but it doens't > work. > >> > Now i push the config file manually after the Installation to the > >> > Server. > >> > > >> > >> I personally think that rolling the ossec.conf into your configuration > >> management solution is the way to go. > >> > >> > Best regards, > >> > Alex > >> > > >> > > >> > Am Freitag, 18. Juli 2014 13:59:34 UTC+2 schrieb dan (ddpbsd): > >> >> > >> >> On Fri, Jul 18, 2014 at 5:11 AM, Alexander Pietrasch > >> >> <[email protected]> wrote: > >> >> > Hallo all together, > >> >> > > >> >> > i want to make mass deployment and i found in the > >> >> > "/opt/ossec-hids-2.8/src/InstallAgent.sh" at Line 226 the Line "cp > >> >> > -pr > >> >> > ../etc/ossec.mc ${DIR}/etc/ossec.conf" > >> >> > It copies the file ossec.mc to a directory ot /etc/ossec.conf. > >> >> > > >> >> > So my Question is, can i change the ossec.mc, transfer it to > other > >> >> > system, > >> >> > execute the install.sh and all Clients have the same > >> >> > /var/ossec/etc/ossec.conf File? > >> >> > > >> >> > My Idea behind that is, that i make a tar-ball with some changes > in > >> >> > the > >> >> > /opt/ossec-hids-2.8/etc/preloaded-vars.conf and changes in the > >> >> > ossec.mc > >> >> > File > >> >> > so that the installation gets fully automatic. > >> >> > > >> >> > > >> >> > The Config on each client should be the following: > >> >> > > >> >> > <ossec_config> > >> >> > <client> > >> >> > <server-ip>192.168.XXX.XXX</server-ip> > >> >> > <config-profile>StandardClientconfig</config-profile> > >> >> > </client> > >> >> > </ossec_config> > >> >> > > >> >> > >> >> Try it and find out. I don't see why not. > >> >> > >> >> > -- > >> >> > > >> >> > --- > >> >> > You received this message because you are subscribed to the Google > >> >> > Groups > >> >> > "ossec-list" group. > >> >> > To unsubscribe from this group and stop receiving emails from it, > >> >> > send > >> >> > an > >> >> > email to [email protected]. > >> >> > For more options, visit https://groups.google.com/d/optout. > >> > > >> > -- > >> > > >> > --- > >> > You received this message because you are subscribed to the Google > >> > Groups > >> > "ossec-list" group. > >> > To unsubscribe from this group and stop receiving emails from it, > send > >> > an > >> > email to [email protected]. > >> > For more options, visit https://groups.google.com/d/optout. > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
