Solaris 10 from sources
This section describes how to download and build the Wazuh HIDS Solaris agent from sources for the following versions:
For Solaris 10 i386
For Solaris 10 SPARC
Installing Wazuh agent
Install development tools and compilers.
1.1 Install pkgutil.
# pkgadd -d http://get.opencsw.org/now
1.2 Install the following tools:
# /opt/csw/bin/pkgutil -y -i git automake gmake autoconf libtool wget curl gcc5core
Download the latest version and a necessary file.
# git clone -b v3.10.2 https://github.com/wazuh/wazuh.git # wget -P wazuh https://raw.githubusercontent.com/wazuh/wazuh-packages/master/solaris/solaris10/solaris10_patch.sh
Create an user and group called ossec needed for installation.
# groupadd ossec # useradd -g ossec ossec
Run the following commands to update the makefile
# mv wazuh/src/Makefile wazuh/src/Makefile.tmp # sed -n '/OSSEC_LDFLAGS+=-z relax=secadj/!p' wazuh/src/Makefile.tmp > wazuh/src/Makefile
Compile the sources files.
For Solaris 10 i386:
# cd wazuh/src # gmake clean # gmake deps # gmake -j 4 TARGET=agent PREFIX=/var/ossec USE_SELINUX=no DISABLE_SHARED=yes
For Solaris 10 SPARC:
# cd wazuh/src # gmake clean # gmake deps # gmake -j 4 TARGET=agent PREFIX=/var/ossec USE_SELINUX=no USE_BIG_ENDIAN=yes DISABLE_SHARED=yes
Run the
solaris10_patch.sh
that has previously been downloaded.# cd ../ # chmod +x solaris10_patch.sh # ./solaris10_patch.sh
Run the
install.sh
script. This will run a wizard that will guide you through the installation process using the Wazuh sources:# ./install.sh
If you have previously compiled for another platform, you must clean the build using the Makefile in
src
:# gmake -C src clean # gmake -C src clean-deps
Note
During the installation, users can decide the installation path. Execute the
./install.sh
and select the language, set the installation mode toagent
, then set the installation path (Choose where to install Wazuh [/var/ossec]
). The default path of installation is/var/ossec
. A commonly used custom path might be/opt
. When choosing a different path than the default, if the directory already exist the installer will ask if delete the directory or if installing Wazuh inside. You can also run an unattended installation.The script will ask about what kind of installation you want. Type
agent
in order to install a Wazuh agent:
1- What kind of installation do you want (manager, agent, local, hybrid or help)? agent
Now that the agent is installed, the next step is to register and configure it to communicate with the manager. For more information about this process, please visit the document: user manual.