Re: bastille deb (testing) hosed?
>>>>> On Tue, 14 May 2002, "cj" == Colin Watson wrote:
cj> The maintainer just mailed me to say that a new package
cj> is available, and he'd like you to test it out.
Only one perl booboo remains:
"Using Tk user interface module.
"Only displaying questions relevant to the current configuration.
"Can't locate Bastille_Tk.pm in @INC (@INC contains: /usr/lib
/usr/local/lib/perl/5.6.1 /usr/local/share/perl/5.6.1 /usr/lib/perl5
/usr/share/perl5 /usr/lib/perl/5.6.1 /usr/share/perl/5.6.1
/usr/local/lib/site_perl /usr/lib/perl5/site_perl/) at
/usr/sbin/InteractiveBastille line 296."
Bastille_Tk.pm is here:
# dpkg -L bastille |grep Bastille_Tk
/usr/share/perl5/site_perl/Bastille_Tk.pm
...so again my brute force fix was this:
# cd /usr/share/perl5
# ln -s /usr/share/perl5/site_perl/Bastille_Tk.pm Bastille_Tk.pm
...and that did the trick.
I am left wondering whether psad is installed or not. Is there supposed to be
an "/etc/init.d/psad"? I note in /etc/psad/psad.conf the following:
my $whoisCmd = "/usr/local/bin/whois.psad";
my $psadwatchdCmd = "/usr/local/bin/psadwatchd";
my $kmsgsdCmd = "/usr/local/bin/kmsgsd";
my $diskmondCmd = "/usr/local/bin/diskmond";
but none of these are to found.
One further, minor, glitch:
# /etc/init.d/bastille-firewall restart
Setting up IP spoofing protection... done.
Allowing traffic from trusted interfaces... done.
Loading NAT modules... done.
Setting up masquerading rules... done.
Loading masquerading modules...insmod: ip_nat_raudio: no module by that name
found
Error loading ip_nat_raudio module
insmod: ip_nat_vdolive: no module by that name found
Error loading ip_nat_vdolive module
done.
Setting up chains for public/internal interface traffic... done.
Setting up general rules... done.
Setting up outbound rules... done.
touch: creating `/var/lock/subsys/bastille-firewall': No such file or directory
#
A simple:
# mkdir /var/lock/subsys
...fixed that.
All in all, apart from psad (which, being an old snort fan, I would like to
see!), I'd say we are 99.44% of the way there!
Best regards,
--
Bob Bernstein
at http://www.ruptured-duck.com
Esmond, Rhode Island
USA
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: