sleuthkit-users

[sleuthkit-users] newbie in linux need help installing TSK and Autopsy

[Irene S. <sno...@ya...>]

Hi all,

I am current a computer forensics student, and this is my first year. I have heard a lot of the TSK tool and was trying to install it on my PC (with Linux variant Ubuntu).

Everything seems fine, except I spotted this error when I try to make install the TSK toolkit:



make[3]: Entering directory `/home/irene/sleuthkit-3.0.0/tsk3'
/bin/bash ../config/mkinstalldirs /usr/local/lib
/bin/bash ../libtool --mode=install /usr/bin/install -c  libtsk3.la /usr/local/lib/libtsk3.la
/usr/bin/install -c .libs/libtsk3.so.3.1.2 /usr/local/lib/libtsk3.so.3.1.2
/usr/bin/install: cannot create regular file `/usr/local/lib/libtsk3.so.3.1.2': Permission denied
make[3]: *** [install-libLTLIBRARIES] Error 1
make[3]: Leaving directory `/home/irene/sleuthkit-3.0.0/tsk3'
make[2]: *** [install-am] Error 2
make[2]: Leaving directory `/home/irene/sleuthkit-3.0.0/tsk3'
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory `/home/irene/sleuthkit-3.0.0/tsk3'
make: *** [install-recursive] Error 1


I tried to ignore this and try installing Autopsy which also lives in /irene directory, I keep on getting this error:

Searching for Sleuth Kit Installation.
Sleuth Kit tools were not found in the standard install locations.
If you have not installed them, do so now and configure autopsy again.
If you have installed them in a non-standard location, then
  enter the "bin" directory now:
/usr/local/bin
TSK tools were not found or incomplete (try again):
/home/irene/sleuthkit-3.0.0
TSK tools were not found or incomplete (try again):
`/home/irene/sleuthkit-3.0.0
TSK tools were not found or incomplete (try again):
`/home/irene/sleuthkit-3.0.0/tsk3


I would really appreciate it if you can provide me some direction in going further.

Thanks very much in advance.

Best regards,
Irene



      

Re: [sleuthkit-users] newbie in linux need help installing TSK andAutopsy

[Grundy, B. J. (HQ-WIM51) <BG...@na...>]

Hi Irene:

> Everything seems fine, except I spotted this error when I try to make
> install the TSK toolkit:
<snip>
> /usr/bin/install: cannot create regular file
> `/usr/local/lib/libtsk3.so.3.1.2': Permission denied

You need to be root when running "make install".  In Ubuntu, I believe
you need to use "sudo make install".  Or su to root and run make
install.

> I tried to ignore this and try installing Autopsy which also lives in
> /irene directory, I keep on getting this error:
> 
> Searching for Sleuth Kit Installation.
> Sleuth Kit tools were not found in the standard install locations.

That would be because Autopsy depends on Sleuthkit.  It needs the TSK
tools to actually run.  Until you have Sleuthkit properly installed, you
wont' be able to install Autopsy.  Run the TSK install as root (the
configure and compile as a regular user is fine...), and you should be
good to go.

Hope this helps,

Barry


/***************************************
Special Agent Barry J. Grundy
Resident Agent in Charge
NASA Office of Inspector General
Computer Crimes Division
Eastern Region
(301)286-3358 (w)
(202)246-6497 (c)
**************************************/
! WARNING !  This email including any attachments is intended only for
authorized recipients.  Recipients may only forward this information as
authorized.  This email may contain non-public information that is "Law
Enforcement Sensitive," "Sensitive but Unclassified," or otherwise
subject to the Privacy Act and/or legal and other applicable privileges
that restrict release without appropriate legal authority and clearance.
Accordingly, the use, dissemination, distribution or reproduction of
this information to or by unauthorized or unintended recipients,
including but not limited to non-NASA recipients, may be unlawful.

Re: [sleuthkit-users] newbie in linux need help installing TSK andAutopsy

[Irene S. <sno...@ya...>]

Thank you very much! This worked!!


--- On Sun, 12/7/08, Grundy, Barry J. (HQ-WIM51) <BG...@na...> wrote:

> From: Grundy, Barry J. (HQ-WIM51) <BG...@na...>
> Subject: RE: [sleuthkit-users] newbie in linux need help installing TSK andAutopsy
> To: sno...@ya..., sle...@li...
> Date: Sunday, December 7, 2008, 8:54 PM
> Hi Irene:
> 
> > Everything seems fine, except I spotted this error
> when I try to make
> > install the TSK toolkit:
> <snip>
> > /usr/bin/install: cannot create regular file
> > `/usr/local/lib/libtsk3.so.3.1.2': Permission
> denied
> 
> You need to be root when running "make install". 
> In Ubuntu, I believe
> you need to use "sudo make install".  Or su to
> root and run make
> install.
> 
> > I tried to ignore this and try installing Autopsy
> which also lives in
> > /irene directory, I keep on getting this error:
> > 
> > Searching for Sleuth Kit Installation.
> > Sleuth Kit tools were not found in the standard
> install locations.
> 
> That would be because Autopsy depends on Sleuthkit.  It
> needs the TSK
> tools to actually run.  Until you have Sleuthkit properly
> installed, you
> wont' be able to install Autopsy.  Run the TSK install
> as root (the
> configure and compile as a regular user is fine...), and
> you should be
> good to go.
> 
> Hope this helps,
> 
> Barry
> 
> 
> /***************************************
> Special Agent Barry J. Grundy
> Resident Agent in Charge
> NASA Office of Inspector General
> Computer Crimes Division
> Eastern Region
> (301)286-3358 (w)
> (202)246-6497 (c)
> **************************************/
> ! WARNING !  This email including any attachments is
> intended only for
> authorized recipients.  Recipients may only forward this
> information as
> authorized.  This email may contain non-public information
> that is "Law
> Enforcement Sensitive," "Sensitive but
> Unclassified," or otherwise
> subject to the Privacy Act and/or legal and other
> applicable privileges
> that restrict release without appropriate legal authority
> and clearance.
> Accordingly, the use, dissemination, distribution or
> reproduction of
> this information to or by unauthorized or unintended
> recipients,
> including but not limited to non-NASA recipients, may be
> unlawful.


      

Re: [sleuthkit-users] newbie in linux need help installing TSK and Autopsy

[Juergen L. <jue...@gm...>]

On Sun, Dec 07, 2008 at 03:54:11PM -0800, Irene Shih wrote:
(...)

> Everything seems fine, except I spotted this error when I try to make install the TSK toolkit:

(...)

> /usr/bin/install: cannot create regular file `/usr/local/lib/libtsk3.so.3.1.2': Permission denied

An unpriviledged user cannot install files anywhere in the file
system. This must be done as root (= a priviledged user). 

Under ubuntu you will have to type "sudo make install" for this.

(...)

> I tried to ignore this and try installing Autopsy which also lives in /irene directory, I keep on getting this error:

Ignoring this is not possible. TSK must be installed at least anywhere.
And then you can install and run autopsy.

Bye, bye

Juergen

Re: [sleuthkit-users] newbie in linux need help installing TSK and Autopsy

[Irene S. <sno...@ya...>]

Thank you, that's exactly what I had to do!!


--- On Mon, 12/8/08, Juergen Leising <jue...@gm...> wrote:

> From: Juergen Leising <jue...@gm...>
> Subject: Re: [sleuthkit-users] newbie in linux need help installing TSK and Autopsy
> To: sle...@li...
> Date: Monday, December 8, 2008, 7:22 PM
> On Sun, Dec 07, 2008 at 03:54:11PM -0800, Irene Shih wrote:
> (...)
> 
> > Everything seems fine, except I spotted this error
> when I try to make install the TSK toolkit:
> 
> (...)
> 
> > /usr/bin/install: cannot create regular file
> `/usr/local/lib/libtsk3.so.3.1.2': Permission denied
> 
> An unpriviledged user cannot install files anywhere in the
> file
> system. This must be done as root (= a priviledged user). 
> 
> Under ubuntu you will have to type "sudo make
> install" for this.
> 
> (...)
> 
> > I tried to ignore this and try installing Autopsy
> which also lives in /irene directory, I keep on getting this
> error:
> 
> Ignoring this is not possible. TSK must be installed at
> least anywhere.
> And then you can install and run autopsy.
> 
> Bye, bye
> 
> Juergen
> 
> 
> 
> ------------------------------------------------------------------------------
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in
> Las Vegas, Nevada.
> The future of the web can't happen without you.  Join
> us at MIX09 to help
> pave the way to the Next Web now. Learn more and register
> at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org