Custom Query (463 matches)

On BSD systems that lack the getpeereid() library routine, a local attacker may perform a DoS attack on yule if the unix command socket is used (option SetUseSocket=yes). A local user might fill up the file descriptor table by sending fds over the socket (reported by Rob Holland). Note that FreeBSD has getpeereid() since 4.6, OpenBSD since 3.0.

can you please post instructions on how to compile samhain properly under knoppix? I've used both Install.sh and the ./configure instructions you provide to no avail. I checked this site about 1 year ago, and the same problem existed then. Here's a partial error output:

x_slib.c:(.text+0x37f1): undefined reference to `__stack_chk_guard'
x_slib.c:(.text+0x3994): undefined reference to `__stack_chk_guard'
x_slib.c:(.text+0x3b10): undefined reference to `__stack_chk_fail'
collect2: ld returned 1 exit status
make: *** [samhain] Error 1

Otherwise your product looks great. This would help immeasurably. Thank you

I found this answer to my first problem with Samhain under Knoppix, but it is a very "thorny" install; problems abound. Could you pop in a knoppix disk, and do a clean compile, so that I could know how to do it? Maybe Samhain could even be integrated into a knoppix release if it works, but the install needs to go smoother.

The -f-stack-protector option protects against buffer overflows on the stack (if there are any). To improve security, Samhain uses it if available. Seems that while you are not meant having to add '-lssp' for the libssp library, it occasionally won't work otherwise. I.e. before running 'configure' do this:

LIBS="-lssp"; export LIBS

regards, rainer