On Thursday 06 July 2006 13:43, Andrey Yakovlev wrote:
> Hello Kern.
>
> I using bacula for a long time for a Security checks ( aka tripewire )
> jobs.
Bravo, I wish more people would discover this feature. It is one thing that
lets me sleep at night knowing that if someone installs a rootkit on my
server I will know about it in the morning !
> After upgrading to bacula-1.38.10 and than to .11, verify jobs started
> to output strange diagnostics
>
> ==============
> orion-dir: The following files are missing:
> orion-dir: /usr/local/lib/arj/
> orion-dir: /usr/share/openssl/
> orion-dir: /usr/local/lib/perl5/site_perl/
> orion-dir: /usr/local/lib/perl5/
> orion-dir: /usr/local/lib/
> orion-dir: /usr/local/lib/mysql/
> orion-dir: /usr/local/lib/compat/pkg/
> orion-dir: /usr/local/lib/compat/
> orion-dir: /usr/local/lib/gettext/
> ...
> an so on
> ================
Well, there was a bug in previous versions which prevented Bacula from
printing missing files. In fixing it, it is possible that I introduced
another problem. However, I have not seen the above here, and I suspect
there is just some strange thing with your catalog.
What I recommend is to run your Verify job with InitCatalog, then immediately
afterward run it again with Catalog, and if still reports problems, then we
need to look into it some more. Hopefully that will resolve your problems.
One thing to know is that the current algorithm will get confused if you run
multiple simultaneous Verifies, so please ensure that the verify jobs run one
at a time.
In any case, please let me know how it turns out ...
I hope you don't mind me coping the bacula-users list, I think they might be
interested in this.
>
> These catalogs are on disk, but veryfy jobs thinks that they missing. Why ?
> And also, these catalogs are within catalogs defined in 2-nd "Include"
> (/usr/share/openssl,
> /usr/local/man, /usr/local/lib).
>
> May be, there is problems with config ? or with verify run algorithms ?
>
>
> Here is part of config with Fileset
>
> =============
> FileSet {
> Name = "VerifySet"
> Include {
> Options {
> RegexFile = "^.*\/man\/whatis$"
> wilddir = */man/*
> Exclude = yes
> }
>
> Options {
> verify=pins1ug
> signature=SHA1
> #wildfile= */man/*
> #wilddir = */man/*
> #wildfile = whatis
> #Exclude = yes
> }
>
> File = /kernel
> File = /bin
> File = /boot
> File = /etc
> File = /lib
> File = /libexec
> File = /sbin
> File = /usr/bin
> File = /usr/include
> File = /usr/lib
> File = /usr/libdata
> File = /usr/libexec
> File = /usr/sbin
> File = /usr/share
> File = /usr/local
> File = /root/scripts
>
> }
>
>
> Include {
> Options {
> RegexFile = "^.*\/man\/whatis$"
> Exclude = yes
> }
> Options {
> wildfile= whatis
> Exclude = yes
> }
>
> Options {
> verify=pnsug
> #wildfile= */man/*
> wilddir = */man/*
> }
>
> Options {
> RegexFile = "^.*$"
> Exclude = yes
> }
>
> File = /usr/share/openssl
> File = /usr/local/man
> File = /usr/local/lib
> }
>
> Exclude {
> File = /usr/local/lib/nessus
> File = /usr/share/man
> }
>
> }
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
