Sunday, September 8, 2013

installing bastille linux security tool

all that glitters is not gold

The Tripwire binaries are located in /usr/sbin and the database is located in /var/lib/tripwire. It is strongly advised that these locations be stored on write-protected media (e.g. mounted RO floppy). See /usr/share/doc/tripwire/README.Debian for details.

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

CAcert.org                                                   CT,,
CAcert.org Class 3                                           CT,,



/usr/sbin/bastille: line 173: [: too many arguments
WARNING: /usr/bin/perl cannot find Perl module Tk.
         The above module(s) is/are required to correctly display
         the Bastille User Interface.  If you are unable to find a
         pre-compiled module for your OS, they can be found at:
           http://www.cpan.org/modules/01modules.index.html
         If you installed the modules in another installation of
         perl besides the one listed in the error message, you may
         override Bastille's search path by setting the
         $CORRECT_PERL_PATH environment variable to the directory
         that the desired perl binary is located in.
         If you don't want to use the default X11 interface then
         run 'bastille -c'. For more information on available interfaces
         see bastille(1m) or run 'bastille -h'


sudo apt-get install perl-tk


[*] Could not find kmsgsd, edit /etc/psad/psad.conf at /usr/sbin/psad line 10653.
 * Unable to start the daemon
 * Starting Port Scan Attack Detector psad                               [fail]
invoke-rc.d: initscript psad, action "start" failed.
dpkg: error processing psad (--configure):
 subprocess installed post-installation script returned error exit status 1
Setting up perl-tk (1:804.030-1) ...
Errors were encountered while processing:
 psad
E: Sub-process /usr/bin/dpkg returned an error code (1)


What is PSAD?
PSAD is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze #iptables log messages to detect port scans and other suspicious traffic. A typical deployment is to run psad on the iptables firewall where it #has #the fastest access to log data.
http://www.backtrack-linux.org/wiki/index.php/PSAD_Install


sudo dpkg -C
The following packages are only half configured, probably due to problems
configuring them the first time.  The configuration should be retried using
dpkg --configure or the configure menu option in dselect:
 psad                 Port Scan Attack Detector



sudo dpkg --configure psad
Setting up psad (2.2.1-1) ...
[*] Could not find kmsgsd, edit /etc/psad/psad.conf at /usr/sbin/psad line 10653.
 * Unable to start the daemon
 * Starting Port Scan Attack Detector psad                               [fail]
invoke-rc.d: initscript psad, action "start" failed.
dpkg: error processing psad (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 psad

sudo bastille
/usr/sbin/bastille: line 173: [: too many arguments
defined(%hash) is deprecated at /usr/lib/Bastille/HP_API.pm line 100.
(Maybe you should just omit the defined()?)
defined(%hash) is deprecated at /usr/lib/Bastille/API.pm line 1286.
(Maybe you should just omit the defined()?)
ERROR:   System is not running a stable Debian GNU/Linux version. Setting to 5.0.
NOTE: Valid display found; defaulting to Tk (X) interface.
NOTE: Using Tk user interface module.
NOTE: Only displaying questions relevant to the current configuration.

Copyright (C) 1999-2002 Jay Beale
Copyright (C) 1999-2001 Peter Watkins
Copyright (C) 2000 Paul L. Allen
Copyright (C) 2001-2003 Hewlett-Packard Development Company, L.P.
Bastille is free software; you are welcome to redistribute it under
certain conditions.  See the 'COPYING' file in your distribution for terms.

DISCLAIMER.  Use of Bastille can help optimize system security, but does not
guarantee system security. Information about security obtained through use of
Bastille is provided on an AS-IS basis only and is subject to change without
notice. Customer acknowledges they are responsible for their system's security.
TO THE EXTENT ALLOWED BY LOCAL LAW, Bastille (SOFTWARE) IS PROVIDED TO YOU
AS IS WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, WHETHER ORAL OR WRITTEN,
EXPRESS OR IMPLIED.  JAY BEALE, THE BASTILLE DEVELOPERS, AND THEIR SUPPLIERS
DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
Some countries, states and provinces do not allow exclusions of implied
warranties or conditions, so the above exclusion may not apply to you. You may
have other rights that vary from country to country, state to state, or province
to province.  EXCEPT TO THE EXTENT PROHIBITED BY LOCAL LAW, IN NO EVENT WILL
JAY BEALE, THE BASTILLE DEVELOPERS, OR THEIR SUBSIDIARIES, AFFILIATES OR
SUPPLIERS BE LIABLE FOR DIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL OR OTHER
DAMAGES (INCLUDING LOST PROFIT, LOST DATA, OR DOWNTIME COSTS), ARISING OUT OF
THE USE, INABILITY TO USE, OR THE RESULTS OF USE OF THE SOFTWARE, WHETHER BASED
IN WARRANTY, CONTRACT, TORT OR OTHER LEGAL THEORY, AND WHETHER OR NOT ADVISED
OF THE POSSIBILITY OF SUCH DAMAGES. Your use of the Software is entirely at your
own risk. Should the Software prove defective, you assume the entire cost of all
service, repair or correction. Some countries, states and provinces do not allow
the exclusion or limitation of liability for incidental or consequential
damages, so the above limitation may not apply to you.

You must accept the terms of this disclaimer to use
Bastille.  Type "accept" (without quotes) within 5
minutes to accept the terms of the above disclaimer
> accept
This disclaimer will not appear again on this machine.
To suppress the disclaimer on other machines, use Bastille's
-n flag (example: bastille -n).
NOTE: Bastille is scanning the system configuration...
NOTE: This appears to be your first interactive run -- creating a new
del

1 comment:

  1. If you want your ex-girlfriend or ex-boyfriend to come crawling back to you on their knees (no matter why you broke up) you gotta watch this video
    right away...

    (VIDEO) Have your ex CRAWLING back to you...?

    ReplyDelete