Re: [Bastille-linux-discuss] psad & Bastille general errors

[h4x3r <h4...@be...>]

On Mon, 2005-02-14 at 20:59 -0500, Michael Rash wrote:
> Hi -

Hi back..

> 
> About the mail command issue, what is the output of the following
> commands?:
> 
> $ which mail

$ which mail
/usr/bin/which: no mail in
(/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin:/usr/lib/jre/bin:/home/*user/bin)


> # grep mailCmd /etc/psad/psad.conf

# grep mailCmd /etc/psad/psad.conf
mailCmd          /bin/mail;
sendmailCmd      /usr/sbin/sendmail;

# updatedb
# locate sendmail
	/usr/lib/sendmail
	/usr/sbin/sendmail
why more than one? I'll have to check into this.

I assume the mail binary is a physical file not a link to sendmail..?
I do have: 
/usr/bin/mailq A LINK TO:/usr/sbin/sendmail.sendmail 
/usr/bin/mailshar
/usr/bin/mailstat
/usr/bin/mailstats
/usr/bin/rmail
/usr/bin/procmail
/usr/bin/rmail.sendmail
/usr/bin/ksendbugmail
/usr/bin/kmailservice
/usr/bin/mail-files
/usr/bin/mailq.sendmail
/usr/bin/launchmail
/usr/bin/mailshar
/usr/bin/formail
/usr/bin/newaliases.sendmail
/usr/bin/mailq
/usr/bin/mailstat
/usr/sbin/mailstats
/usr/sbin/sendmail.sendmail
/usr/sbin/sendmail

Seems like alot of mailers there, I should read more and eliminate
some of those..

perhaps a fresh install of Batille and psad are in order here..

I ran this script:

[me@my Bastille]$ ./test_Sendmail.pm
./test_Sendmail.pm: 
       line 7: {Sendmail}{sendmaildaemon}: command not found
./test_Sendmail.pm: 
       line 8: syntax error near unexpected token `'sendmail''
./test_Sendmail.pm: 
       line 8: `  sub { &B_is_service_off('sendmail'); };'
 

that all I have...

/var/spool/mail/root should be the set destination for the mail logs..?

Holding my hand wasn't my original plan, I'm fairly new to Linux in
general. I greatly appreciate you're efforts!


> The mail binary (which is most likely installed, but maybe not)
> should be located in an obvious path like /bin or /usr/bin.  If
> it is installed, you will need to edit the psad.conf file to
> point the mailCmd keyword to the correct path.
> 
> Actually, psad searches the following directories if the path to
> a binary is not correct in the psad.conf file:
> 
>     /bin
>     /sbin
>     /usr/bin
>     /usr/sbin
>     /usr/local/bin
>     /usr/local/sbin
> 
> So... maybe the mail command is not installed on your system?
> 
> --Mike
> 
> 
> 
> On Feb 14, 2005, h4x3r wrote:
> 
> > my fault,
> > 
> > should read the doco better, psad.conf contains this:
> > 
> > # $Id: psad.conf,v 1.96 2004/10/24 18:17:45 mbr Exp $
> > #
> > 
> > ### Supports multiple email addresses (as a comma separated
> > ### list).
> > EMAIL_ADDRESSES               (root@localhost);
-->> snip

----- 
h4x3r
Registered Linux User 380358 http://counter.li.org  
Fedora Core 3, kernel 2.6.10-1.760_FC3smp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~