天天看點

ossec install.sh failed

Hi,

I'm installing ossec 2.7 on some hosts. I've previously used 2.6 with no trouble.

The server install went fine. But on my agents, I get this output when trying to install:

 OSSEC HIDS v2.7 Installation Script -  http://www.ossec.net    You are about to start the installation process of the OSSEC HIDS.  You must have a C compiler pre-installed in your system.  If you have any questions or comments, please send an e-mail  to  [email protected] (or  [email protected]).     - System: Linux  puppet.mixcic.eu 3.2.0-35-generic   - User: root   - Host:  puppet.mixcic.eu

  -- Press ENTER to continue or Ctrl-C to abort. --

1- What kind of installation do you want (server, agent, local, hybrid or help)? agent

  - Agent(client) installation chosen.

2- Setting up the installation environment.

 - Choose where to install the OSSEC HIDS [/var/ossec]: 

    - Installation will be made at  /var/ossec .

3- Configuring the OSSEC HIDS.

./install.sh: 372: ./install.sh: [[: not found

  3.2- Do you want to run the integrity check daemon? (y/n) [y]:

It seems to falter at line 372 of install.sh and skips the question of what IP the remote OSSEC server is.

Line 372 is:

   if [[ "X${USER_AGENT_SERVER_IP}" = "X" && "X${USER_AGENT_SERVER_NAME}" = "X" ]]; then

It seems that on hosts such as Ubuntu 12.04, which use /bin/dash as the default shell, this section fails when installing as an agent, unless you execute the install.sh explicitly with 'bash install.sh '.

Just sending it here in case it helps someone else.

Cheers