Skip to content

Solaris 11 OSSEC Install Failing #2016

Description

@avoytheboy

Hello all,

I am currently labbing in a Solaris 11 box and trying to get OSSEC installed on this system. I have tried versions 3.6.0 all the way down to 2.8.3 (Which installs correctly).

I have made the edits to the older versions in relation to gmake and sa->len, but I am still running into errors like:

"install: null not found anywhere" with installers newer than 2.8.3. When going into the makefile and editing these /dev/null entries to touch, chown, chmod. I can get past them, but then run into issues with the install past compilation

"install: ossec-logcollector not found anywhere" during its move to the /var/ossec/bin directory. I have tried to edit the Makefile to use specific full names of directories (i.e. /tmp/ossec-3.1.0/src/ossec-logcollector) and this gave me the same error.

When using the 3.6.0 release, I cannot get the system to use the extracted PCRE2 external directory when installing. Doesn't matter if I use the var PCRE2_SYSTEM=y/n etc, which instantly makes this fail. I have also tried to install the base Solaris pcre2 package, and through CSW, still failing.

I keep seeing that OSSEC has Solaris support, but it seems that I can't get any versions past a 2016 version to install correctly. I understand this issue is a bit messy, but I haven't made much of these. If there is any information you require from me, please let me know and I can provide them.

Other Info and Links I have followed to look into this:
https://kifarunix.com/how-to-install-ossec-agent-on-solaris-11-4/
https://www.ossec.net/docs/manual/supported-systems.html#operating-systems

Thank you,

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions