Search found 25 matches

by jeremiah
Wed Sep 17, 2008 1:53 am
Forum: General Help and Development Discussion
Topic: ossec-remoted
Replies: 7
Views: 5405

ok will do. The automated emails I got from the support portal the last time I tried it were confusing and hard to read so was hoping to avoid dealing with that again. Also thought a note here would help anyone else who gets the same error. I understand the need to track issues somewhere other than ...
by jeremiah
Mon Sep 15, 2008 11:36 am
Forum: General Help and Development Discussion
Topic: ossec-remoted
Replies: 7
Views: 5405

Didn't change anything config-wise before this happened... and 2 or 3 days before upgrading rsync I updated mod_security and osssec-remoted didn't segfault when restarting ossec... fwiw

Yep, ossec-remoted stops but does not respawn.
by jeremiah
Sun Sep 14, 2008 3:04 pm
Forum: General Help and Development Discussion
Topic: ossec-remoted
Replies: 7
Views: 5405

I've got these two for ossec:
ossec-hids-server-1.5-3.el5.art
ossec-hids-1.5-3.el5.art

on CentOS 5.2
by jeremiah
Sat Sep 13, 2008 2:29 pm
Forum: General Help and Development Discussion
Topic: ossec-remoted
Replies: 7
Views: 5405

ossec-remoted

Hi there, just got this error after upgrading rsync from rpmforge to: rsync-3.0.4-1.el5.rf. [edit] the error occurred when I ran asl -s -f after the upgrade[/edit] kernel: ossec-remoted[31318]: segfault at 0 ip 4028cb sp 781c6e76e2a0 error 4 in ossec-remoted[400000+40000] I don't think it matters mu...
by jeremiah
Thu Sep 04, 2008 2:07 pm
Forum: Requests
Topic: Patched perl for redhat distros
Replies: 8
Views: 9340

Ok, thanks. So I have gone back to the beginning now (after getting more time to work on this). I found that all I did at first was build an rpm from the same src.rpm I downloaded... Think I've got the rhythm now: install src.rpm, create patch files, edit spec file, *rebuild src.rpm*, build rpm... A...
by jeremiah
Mon Sep 01, 2008 1:53 am
Forum: Requests
Topic: Patched perl for redhat distros
Replies: 8
Views: 9340

Thanks for that, I got the spec file and might have added the patches properly... Having a problem when trying to build the rpm with mock though. (x86_64 / mock-0.6.13-1.el5.centos.1) I installed the perl src.rpm with rpm -Uvh, modified the spec file and am using a default mock cfg (copied). When I ...
by jeremiah
Fri Aug 29, 2008 2:58 pm
Forum: Requests
Topic: Patched perl for redhat distros
Replies: 8
Views: 9340

Ok, stupid question... the spec file is a separate entity from the src.rpm right? If so, where do I get it? I found the src.rpm ok at http://mirror.centos.org/centos/5.2/os/SRPMS/. Then googled but can't seem to find it...

Thanks for the guidance.
by jeremiah
Fri Aug 29, 2008 10:56 am
Forum: Requests
Topic: Patched perl for redhat distros
Replies: 8
Views: 9340

I'm down. Never built one from source before, just src.rpms.

I think some of the centos/other(edit: read 'scientific linux') folks are going to try putting together perl5.10 in the extras(edit: read 'Plus') repo, but don't know how long that'll be.

Should I grab that version's source and the patch?
by jeremiah
Fri Aug 29, 2008 10:48 am
Forum: General Help and Development Discussion
Topic: psmon/asl -s -f inconsistencies?
Replies: 2
Views: 2681

fancy that :P

Not only was psa-spamassassin not configured to start on boot (although I haven't been starting it after reboots and it's still been running!?) BUT psa-spamassassin didn't show w/ chkconfig --list... so had to --add it first.

now all is happy and well. Thank you!
by jeremiah
Fri Aug 29, 2008 9:39 am
Forum: Requests
Topic: Patched perl for redhat distros
Replies: 8
Views: 9340

Patched perl for redhat distros

Hello, Well, first do you think that qmail-scanner & spamassassin are very much slowed down by this 'bless' perl bug? https://bugzilla.redhat.com/show_bug.cgi?id=379791 If so, how about a patch:) I'm happy to help, if you think the patch would speed things up, since I know you're busy (who isn't...
by jeremiah
Fri Aug 29, 2008 9:28 am
Forum: General Help and Development Discussion
Topic: psmon/asl -s -f inconsistencies?
Replies: 2
Views: 2681

psmon/asl -s -f inconsistencies?

Hi! I just noticed that during the psmon scan/fix phase there is a difference on what gets [FIXED] between 2 servers. One server says Checking System services monitored by psmon clamd: monitored [FIXED] courier-imap: monitored [FIXED] crond: monitored [FIXED] ossec-hids: monitored [FIXED] psa: monit...
by jeremiah
Wed Jul 30, 2008 10:08 pm
Forum: General Help and Development Discussion
Topic: Application Inventory
Replies: 1
Views: 2192

Application Inventory

Hi, I noticed the app scanner is missing a couple different WordPress installs on 2 different servers. It finds version 2.0.4, but not 2.5.1 or 2.6. I ran the scanner directly and via the daily cron script, but same results... as expected. Any ideas? CentOS 5 2.6.25.4-4.art.x86_64 All packages are u...
by jeremiah
Tue Jul 29, 2008 8:02 pm
Forum: Requests
Topic: Detect GreyMatter, please
Replies: 1
Views: 4319

Detect GreyMatter, please

Hi,

Here's the project page http://groups.google.com/group/greymatter

Unless it is already. I quickly looked for comprehensive list of apps scanned but didn't find one - is there one?

Thanks!
by jeremiah
Sat May 24, 2008 7:40 pm
Forum: PHP Help and Discussion
Topic: PHP 5.2.5 woes
Replies: 107
Views: 79410

Cool, thanks for the update!
by jeremiah
Fri May 23, 2008 8:05 pm
Forum: PHP Help and Discussion
Topic: PHP 5.2.5 woes
Replies: 107
Views: 79410

Hey those sound like good tips, thanks guys. I just got a virtual guest going so I'll be much better off. This might be slightly ot, but I wondered what asl is/has/will be going to have done;) about the vulns in php <5.2.5? Here are a couple links, I'm not too worried about the php_sprintf_appendstr...