{"id":35,"date":"2010-03-01T22:09:22","date_gmt":"2010-03-01T13:09:22","guid":{"rendered":"http:\/\/blog.isnext.net\/issy\/?p=35"},"modified":"2013-04-13T03:01:50","modified_gmt":"2013-04-12T18:01:50","slug":"%e4%be%b5%e5%85%a5%e6%a4%9c%e7%9f%a5%e7%b3%bb%e3%81%ae%e8%a6%9a%e3%81%88%e6%9b%b8%e3%81%8d%ef%bc%88%ef%bc%93%ef%bc%89","status":"publish","type":"post","link":"https:\/\/blog.isnext.net\/issy\/archives\/35","title":{"rendered":"\u4fb5\u5165\u691c\u77e5\u7cfb\u306e\u899a\u3048\u66f8\u304d\uff08\uff13\uff09"},"content":{"rendered":"

\u25a0 [osiris]OSX\u7528\u306e\u304a\u3059\u3059\u3081\u8a2d\u5b9a\uff08WSM\u304b\u3089\u672c\u4eba\u6295\u7a3f\u3092\u518d\u63b2\u8f09 2004\u5e742\u6708\uff09<\/strong>
\n\u524d\u56de\u307e\u3067\u306b\u8a2d\u5b9a\u3057\u305f\u30de\u30b7\u30f3myclient01\u306fOS\u6a19\u6e96\u306e\u691c\u77e5\u8a2d\u5b9a\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002OSX\u7528\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u8868\u793a\u3055\u308c\u307e\u3059\u3002\u8a2d\u5b9a\u306e\u66f8\u5f0f\u306fapache\u3068\u4f3c\u3066\u3044\u3066\u308f\u304b\u308a\u3084\u3059\u3044\u3067\u3059\u3002\uff08\u3068\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306b\u66f8\u3044\u3066\u3042\u308b\uff09:-)<\/p>\n

[code]osiris-3.0.4-current: host myclient01\u3000\u2190osiris\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3066host xxxx\u3068\u3057\u3066\u30db\u30b9\u30c8\u8a2d\u5b9a\u306b\u5165\u308b
\nmyclient01 is alive.\u3000\u2190\u8a72\u5f53\u30db\u30b9\u30c8\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308c\u3070alive\u3068\u8868\u793a\u3055\u308c\u308b
\nosiris-3.0.4-current[myclient01]: print-config\u3000\u2190print-config\u3067\u73fe\u5728\u306e\u8a2d\u5b9a\u304c\u8868\u793a\u3055\u308c\u308b
\nconfig name: default.darwin\u3000\u2190OSX\u7528\u306e\u30c7\u30d5\u30a9\u30eb\u30c8
\nID: 8850eba9
\nstatus: valid
\nerrors: 0
\nwarnings: 0
\nlines: 43<\/p>\n

——–begin config file ——–<\/p>\n

Recursive no\u3000\u2190\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u305f\u3069\u3063\u3066\u3044\u304b\u306a\u3044
\nFollowLinks no\u3000\u2190\u30ea\u30f3\u30af\u3092\u305f\u3069\u3063\u3066\u3044\u304b\u306a\u3044
\nIncludeAll\u3000\u2190\u5168\u3066\u306e\u9805\u76ee\u3092\u30c1\u30a7\u30c3\u30af
\nHash sha\u3000\u2190\u30cf\u30c3\u30b7\u30e5\u306b\u306fsha\u3092\u4f7f\u3046
\n\u3000\u2190\u30b7\u30b9\u30c6\u30e0\u9805\u76ee\u306b\u95a2\u3059\u308b\u8a2d\u5b9a\u958b\u59cb
\n\u3000Include users\u3000\u2190\u30e6\u30fc\u30b6\u306e\u8ffd\u52a0\u524a\u9664\u3092\u30c1\u30a7\u30c3\u30af
\n\u3000Include groups\u3000\u2190\u30b0\u30eb\u30fc\u30d7\u306e\u8ffd\u52a0\u524a\u9664\u3092\u30c1\u30a7\u30c3\u30af
\n\u3000Include kexts\u3000\u2190\u6a5f\u80fd\u62e1\u5f35\u306e\u8ffd\u52a0\u524a\u9664\u3092\u30c1\u30a7\u30c3\u30af
\n<\/System>\u3000\u2190\u30b7\u30b9\u30c6\u30e0\u9805\u76ee\u306e\u8a2d\u5b9a\u7d42\u4e86
\n\u3000\u2190\/\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u95a2\u3059\u308b\u8a2d\u5b9a\u958b\u59cb
\n\u3000Recursive no\u3000\u2190\/\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3060\u3051\u3092\u898b\u307e\u3059
\n\u3000Include file( “mach_kernel” )\u3000\u2190\/mach_kernel\u306e\u30d5\u30a1\u30a4\u30eb\u3060\u3051\u3092\u898b\u307e\u3059
\n<\/Directory>
\n\u3000\u2190\/private\/var\/root\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u95a2\u3059\u308b\u8a2d\u5b9a\u958b\u59cb
\n\u3000Recursive yes\u3000\u2190\/private\/var\/root\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4ee5\u4e0b\u3082\u305f\u3069\u3063\u3066\u898b\u307e\u3059
\n\u3000Include executable\u3000\u2190\u5b9f\u884c\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb\u3060\u3051\u3092\u898b\u307e\u3059\uff08\u63a8\u6e2c\uff09
\n\u3000Include suid\u3000\u2190suid\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3060\u3051\u3092\u898b\u307e\u3059\uff08\u63a8\u6e2c\uff09
\n<\/Directory>
\n
\n\u3000IncludeAll\u3000\u2190\u5168\u3066\u306e\u9805\u76ee\u3092\u30c1\u30a7\u30c3\u30af
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory>
\n
\n\u3000IncludeAll
\n<\/Directory><\/p>\n

# EOF<\/p>\n

——– end config file ——–[\/code]<\/p>\n

OSX\u3067\u306fApplication\u30d5\u30a9\u30eb\u30c0\u306b\u30d5\u30a1\u30a4\u30eb\u304c\u8ffd\u52a0\u3055\u308c\u308b\u3053\u3068\u304c\u591a\u3044\u306e\u3067\u305d\u306e\u8a2d\u5b9a\u3092\u52a0\u3048\u308b\u305f\u3081\u306b\u306f\u3001\u4e0a\u8a18\u306b\u4ee5\u4e0b\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3059\u308c\u3070OK\u3067\u3059\u3002<\/p>\n

[code]
\n\u3000IncludeAll
\n<\/Directory>
\n[\/code]
\n\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3059\u308b\u6642\u306b\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n

[code]osiris-3.0.4-current[myclient01]: edit-config\u3000\u2190\u7de8\u96c6\u30b3\u30de\u30f3\u30c9\uff08\u5fc5\u305a\u30db\u30b9\u30c8\u8a2d\u5b9a\u306b\u3044\u306a\u3044\u3068\u3044\u3051\u306a\u3044\u3067\u3059\uff09[\/code]<\/p>\n

\u3053\u3046\u3059\u308b\u3068vi\u30a8\u30c7\u30a3\u30bf\u306e\u753b\u9762\u306b\u306a\u308a\u4e0a\u8a18\u306e\u8a2d\u5b9a\u304c\u8868\u793a\u3055\u308c\u7de8\u96c6\u3067\u304d\u307e\u3059\u3002\u7de8\u96c6\u3092\u7d42\u3048\u3066vi\u3092\u7d42\u4e86\u3059\u308b\u3068\u4ee5\u4e0b\u306e\u8868\u793a\u304c\u51fa\u3066\u5b8c\u4e86\u3057\u307e\u3059\u3002
\n[code]
\nconfig file changed, updating…<\/p>\n

the config: (default.darwin) was succesfully updated.
\n[\/code]
\n\u25a0 [osiris]Filter\u306e\u8a2d\u5b9a<\/strong>
\n\u3053\u306e\u72b6\u614b\u3067\u305d\u306e\u307e\u307e\u904b\u7528\u3057\u3066\u3082\u5927\u304d\u306a\u554f\u984c\u306f\u306a\u3044\u3093\u3067\u3057\u3087\u3046\u304c\u3001\u6642\u3005\u6c17\u306b\u306a\u308b\u3053\u3068\u304c\u8d77\u304d\u307e\u3059\u3002\u305d\u308c\u306f\/usr\/bin\u3084\/usr\/sbin\u306e\u307b\u3068\u3093\u3069\u30d5\u30a1\u30a4\u30eb\u3067ctime\u304c\u7570\u306a\u308b\u3068\u3044\u3046\u691c\u77e5\u7d50\u679c\u3092\u9001\u3063\u3066\u304f\u308b\u3053\u3068\u3067\u3059\u3002<\/p>\n

\u3053\u308c\u3092\u51fa\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u306b\u306ffilter\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002osiris\u3067\u306f\u30db\u30b9\u30c8\u8a2d\u5b9a\u306bfilter\u304c\u3042\u308b\u306e\u3067\u306f\u306a\u304f\u3001osiris\u306e\u30de\u30cd\u30fc\u30b8\u30e3\u8a2d\u5b9a\uff08mhost\uff09\u5074\u306bfilter\u3092\u66f8\u304f\u306e\u3067\u3061\u3087\u3063\u3068\u308f\u304b\u308a\u306b\u304f\u3044\u611f\u3058\u304c\u3057\u307e\u3059\u3002<\/p>\n

filter\u306f\u6700\u521d\u306f\u4f55\u3082\u767b\u9332\u3055\u308c\u3066\u3044\u306a\u3044\u306e\u3067\u3001\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u304b\u3089\u59cb\u3081\u307e\u3059\u3002
\n[code]
\nosiris-3.0.4-current: edit-filter \u3000\u2190\u30d5\u30a3\u30eb\u30bf\u7de8\u96c6\u30b3\u30de\u30f3\u30c9<\/p>\n

s) show current filters.\u3000\u2190\u73fe\u5728\u306e\u30d5\u30a3\u30eb\u30bf\u3092\u8868\u793a\u3059\u308b\u306b\u306f\u300cs\u300d\u3092\u5165\u529b
\na) add a new filter.\u3000\u2190\u30d5\u30a3\u30eb\u30bf\u3092\u8ffd\u52a0\u3059\u308b\u306b\u306f\u300ca\u300d\u3092\u5165\u529b
\nr) remove filter.\u3000\u2190\u30d5\u30a3\u30eb\u30bf\u3092\u524a\u9664\u3059\u308b\u306b\u306f\u300cr\u300d\u3092\u5165\u529b
\nq) quit\u3000\u2190\u30d5\u30a3\u30eb\u30bf\u8a2d\u5b9a\u3092\u7d42\u4e86\u3057\u307e\u3059<\/p>\n

> a\u3000\u2190\u8ffd\u52a0\u306a\u306e\u3067\u300ca\u300d\u3068\u3057\u307e\u3059<\/p>\n

> host (*=all hosts): *\u3000\u2190\u3069\u306e\u30db\u30b9\u30c8\u306b\u9069\u7528\u3059\u308b\u30d5\u30a3\u30eb\u30bf\u304b\u30db\u30b9\u30c8\u540d\u3067\u6307\u5b9a\u3057\u307e\u3059
\n> path (*=any path): \/Applications\u3000\u2190\u3069\u306e\u30d1\u30b9\u306b\u9069\u7528\u3059\u308b\u30d5\u30a3\u30eb\u30bf\u304b\u30d5\u30eb\u30d1\u30b9\u3067\u6307\u5b9a\u3057\u307e\u3059<\/p>\n

1) Include Only (monitor changes only to certain attributes)\u3000\u2190\u6a19\u6e96\u76e3\u8996\u8a2d\u5b9a\u306e\u4e00\u90e8\u3060\u3051\u3092\u6709\u52b9\u306b\u3057\u305f\u3044\u5834\u5408\u3053\u3061\u3089\u3092\u9078\u629e\u3057\u307e\u3059
\n2) Exclude (ignore changes to certain attributes)\u3000\u2190\u6a19\u6e96\u76e3\u8996\u8a2d\u5b9a\u306e\u4e00\u90e8\u3092\u7121\u52b9\u306b\u3057\u305f\u3044\u5834\u5408\u3053\u3061\u3089\u3092\u9078\u629e\u3057\u307e\u3059
\n> filter type: [2] 2\u3000\u2190\u4eca\u56de\u306f\u6a19\u6e96\u76e3\u8996\u8a2d\u5b9a\u306ectime\u3060\u3051\u3092\u7121\u52b9\u306b\u3059\u308b\u306e\u3067\u3053\u3061\u3089\u3092\u9078\u629e\u3057\u307e\u3059<\/p>\n

csum – checksum\u3000\u2190\u30c1\u30a7\u30c3\u30af\u30b5\u30e0
\ndevice – device number\u3000\u2190\u30c7\u30d0\u30a4\u30b9\u30ca\u30f3\u30d0\u30fc\uff08\u5272\u308a\u5f53\u3066\u305f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30ab\u30fc\u30c9\u304c\u5909\u308f\u3063\u305f\u308a\u3059\u308b\u3068\u51fa\u307e\u3059\uff09
\ninode – inode number\u3000\u2190inode\u30ca\u30f3\u30d0\u30fc\uff08HD\u4e0a\u306e\u8a18\u9332\u4f4d\u7f6e\uff09
\nperm – permissions (mode)\u3000\u2190\u30a2\u30af\u30bb\u30b9\u6a29
\nlinks – number of hard links\u3000\u2190\u30cf\u30fc\u30c9\u30ea\u30f3\u30af\u306e\u6570
\nuid – user ID\u3000\u2190\u30e6\u30fc\u30b6ID
\ngid – group ID\u3000\u2190\u30b0\u30eb\u30fc\u30d7ID
\nmtime – last modification time\u3000\u2190\u6700\u5f8c\u306b\u66f4\u65b0\u3055\u308c\u305f\u6642\u9593
\natime – last access time\u3000\u2190\u6700\u5f8c\u306b\u30a2\u30af\u30bb\u30b9\u3055\u308c\u305f\u6642\u9593
\nctime – last change time\u3000\u2190\u6700\u5f8c\u306b\u5909\u5316\u3057\u305f\u6642\u9593\uff1f\uff1f\uff1f
\ndtype – device type\u3000\u2190\u30c7\u30d0\u30a4\u30b9\u30bf\u30a4\u30d7\uff08\u3088\u304f\u308f\u304b\u308a\u307e\u305b\u3093\uff09
\nbytes – number of bytes\u3000\u2190\u30d5\u30a1\u30a4\u30eb\u306e\u5927\u304d\u3055\uff08\u30d0\u30a4\u30c8\u6570\uff09
\nblocks – number of blocks\u3000\u2190\u30d5\u30a1\u30a4\u30eb\u306e\u5927\u304d\u3055\uff08\u30d6\u30ed\u30c3\u30af\u6570\uff09
\nbsize – block size\u3000\u2190\u30d6\u30ed\u30c3\u30af\u306e\u30b5\u30a4\u30ba
\nosid – owner SID\u3000\u2190\u30aa\u30fc\u30ca\u30fc\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8b58\u5225\u5b50
\ngsid – group SID\u3000\u2190\u30b0\u30eb\u30fc\u30d7\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8b58\u5225\u5b50
\nfileattr – windows file attributes\u3000\u2190Windows\u306e\u30d5\u30a1\u30a4\u30eb\u60c5\u5831
\nnew – not in trusted database\u3000\u2190\u65b0\u898f\u306b\u8ffd\u52a0\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb
\nmissing – not present in latest scan\u3000\u2190\u524a\u9664\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb<\/p>\n

> attributes (comma separated): ctime\u3000 \u2190\u4eca\u56de\u306fctime\u3060\u3051\u9664\u5916\u3057\u307e\u3059\uff08\u8907\u6570\u3042\u308b\u5834\u5408\u306f\u30ab\u30f3\u30de\u3067\u533a\u5207\u3063\u3066\u66f8\u304d\u307e\u3059\uff09<\/p>\n

does this look correct:
\n==> host=*;path=\/Applications;exclude: ctime ; (y\/n)? y\u3000\u2190\u78ba\u8a8d\u3055\u308c\u308b\u306e\u3067\u826f\u3051\u308c\u3070y<\/p>\n

filter added.\u3000\u2190\u7121\u4e8b\u8ffd\u52a0\u3055\u308c\u307e\u3057\u305f
\n[\/code]
\n\u3053\u3046\u3057\u3066\u8ffd\u52a0\u3055\u308c\u305f\u30d5\u30a3\u30eb\u30bf\u306f\u4e0a\u8a18\u3067\u8a2d\u5b9a\u3055\u308c\u305f\u30eb\u30fc\u30eb\u3067\u5404\u30db\u30b9\u30c8\u306b\u9069\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n

\u5177\u4f53\u7684\u306b\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u8a2d\u5b9a\u3092\u6301\u3064\u30db\u30b9\u30c8\u306e\u5834\u5408\u3001<\/p>\n

[code]
\n\u3000IncludeAll
\n<\/Directory>[\/code]<\/p>\n

\u672c\u6765\u3067\u3042\u308c\u3070\u4ee5\u4e0b\u306e\u9805\u76ee\u5168\u3066\u304c\u30c1\u30a7\u30c3\u30af\u3055\u308c\u307e\u3059\u304c<\/p>\n

[code]csum – checksum
\ndevice – device number
\ninode – inode number
\nperm – permissions (mode)
\nlinks – number of hard links
\nuid – user ID
\ngid – group ID
\nmtime – last modification time
\natime – last access time
\nctime – last change time
\ndtype – device type
\nbytes – number of bytes
\nblocks – number of blocks
\nbsize – block size
\nosid – owner SID
\ngsid – group SID
\nfileattr – windows file attributes
\nnew – not in trusted database
\nmissing – not present in latest scan[\/code]<\/p>\n

filter\u3092\u8a2d\u5b9a\u3057\u305f\u306e\u3067ctime\u3060\u3051\u306f\u30c1\u30a7\u30c3\u30af\u3055\u308c\u306a\u304f\u306a\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002\u9006\u306b\u7279\u5b9a\u306e\u9805\u76ee\u3060\u3051\u30c1\u30a7\u30c3\u30af\u3057\u305f\u3044\u5834\u5408\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u3057\u307e\u3059\u3002\uff08\/Application\u306b\u5165\u308b\u30a2\u30d7\u30ea\u306e\u5897\u6e1b\u3084\u30a2\u30af\u30bb\u30b9\u6a29\u3060\u3051\u30c1\u30a7\u30c3\u30af\u3057\u305f\u3044\u3068\u304b\uff09<\/p>\n

[code]> filter type: [2] 1\u3000
\n> attributes (comma separated): new,missing,perm,uid,gid<\/p>\n

does this look correct:
\n==> host=*;path=\/Applications;include: new,missing,perm,uid,gid ; (y\/n)? y[\/code]<\/p>\n

\u3053\u308c\u3067OK\u3067\u3059\u3002<\/p>\n

\u25a0 [osiris]\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u306e\u8a3c\u660e\u66f8\u306e\u66f4\u65b0<\/strong>
\n\uff11\u5e74\u524d\u306b\u8a2d\u5b9a\u3057\u3066\u3053\u308c\u307e\u3067\u554f\u984c\u306a\u304f\u52d5\u4f5c\u3057\u3066\u3044\u305fosirismd\u304c\u6025\u306b\u3053\u3093\u306a\u30e1\u30fc\u30eb\u30a2\u30e9\u30fc\u30c8\u304c\u51fa\u3066\u52d5\u4f5c\u3057\u306a\u304f\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n

[code]Subject: failed to start scheduled scan [host: myhost]
\nDate: Tue, 12 Apr 2005 18:22:51 +0900
\nFrom: “Osiris IDS”
\nTo: mymailaddress
\nhost: myhost<\/p>\n

scheduled scan time: Tue Apr 12 15:00:03 2005
\nThe scheduler produced the following error message:
\nsession key negotiation failed.[\/code]<\/p>\n

\u4f55\u304c\u8d77\u304d\u305f\u306e\u304b\u8abf\u3079\u3066\u307f\u305f\u3068\u3053\u308d\u3001osiris\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u969b\u306b\u751f\u6210\u3055\u308c\u305f\u8a3c\u660e\u66f8\u304c\uff11\u5e74\u3067\u671f\u9650\u5207\u308c\u306b\u306a\u3063\u3066\u3044\u308b\u3089\u3057\u3044\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3057\u305f\u3002\u3053\u306e\u72b6\u614b\u3067osiris\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30a8\u30e9\u30fc\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

[code]Osiris command line management utility – version 3.0.4-current
\nauthenticating to (myhost)<\/p>\n

User: admin
\nPassword:<\/p>\n

WARNING : certificate authentication failed. The certificate
\npresented by the mangaement host (localhost) was not signed by
\nthe root cert loaded from (\/Users\/username\/.osiris\/osiris_root.pem).<\/p>\n

[ presented certificate ]<\/p>\n

issuer = \/C=US\/CN=Osiris Managment Daemon\/OU=Osiris IDS
\nsubject = \/C=US\/CN=Osiris Managment Daemon\/OU=Osiris IDS
\nuntrusted MD5 fingerprint: 16:27:02:E6:4E:B9:36:EB:24:DA:C2:5B:F8:xx:xx:xx.<\/p>\n

If you trust this certificate, delete the root cert and start
\nthis application again.[\/code]<\/p>\n

\u3053\u306e\u554f\u984c\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306b\u306f\u4ee5\u4e0b\u306e\u64cd\u4f5c\u3092\u884c\u306a\u3044\u307e\u3059\u3002<\/p>\n

[code]$ sudo mv \/usr\/local\/osiris\/certs\/osirismd.crt \/usr\/local\/osiris\/certs\/old_osirismd.crt
\n$ sudo SystemStarter restart “Osiris IDS”[\/code]<\/p>\n

\u3053\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5165\u529b\u3059\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u8868\u793a\u304c\u51fa\u307e\u3059\u3002<\/p>\n

[code]
\nWelcome to Macintosh.
\nOsiris Management daemon stopped.
\nOsiris Scanning daemon stopped.
\nStarting osiris management daemon.
\nunable to load server certificate (\/usr\/local\/osiris\/certs\/osirismd.crt)<\/p>\n

==> creating one.<\/p>\n

Generating RSA key, 2048 bit long modulus.
\n………+++
\n……………………………………Waiting for Osiris Host Intrusion Detection System
\n……………………………………………………….Waiting for Osiris Host Intrusion Detection System
\n………………+++<\/p>\n

Starting osiris scanning daemon.
\nStartup complete.
\nHangup[\/code]<\/p>\n

\u3053\u308c\u3067\u65b0\u3057\u3044\u7ba1\u7406\u7528\u8a3c\u660e\u66f8\u304c\u4f5c\u6210\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n

\u25a0 [osiris]\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u306e\u8a3c\u660e\u66f8\u306e\u66f4\u65b0<\/strong>
\n\u4e0a\u8a18\u306e\u64cd\u4f5c\u3092\u3084\u3063\u305f\u5f8c\u306bosiris\u306eadmin\u3092\u64cd\u4f5c\u3057\u3088\u3046\u3068\u3059\u308b\u30e6\u30fc\u30b6\u306e\u30db\u30fc\u30e0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u3042\u308b.osiris\u30d5\u30a9\u30eb\u30c0\u5185\u306eosiris_root.pem\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

[code]$ rm -f \u301c\/.osiris\/osiris_root.pem[\/code]<\/p>\n

\u3053\u308c\u3092\u3084\u3063\u3066\u304a\u304b\u306a\u3044\u3068osiris\u306badmin\u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u307e\u305b\u3093\u3002\u66f4\u306b\u3082\u3046\u3072\u3068\u3064\/usr\/local\/osiris\/\u306b\u3042\u308bosiris_root.pem\u3082\u524a\u9664\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n

[code]$ sudo rm -f \/usr\/local\/osiris\/osiris_root.pem[\/code]<\/p>\n

\u3053\u308c\u3089\u306e\u4f5c\u696d\u3092\u3084\u3063\u305f\u5f8c\u306badmin\u3067\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3088\u3046\u306b\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

\u25a0 [osiris]\u30c1\u30a7\u30c3\u30af\u5bfe\u8c61\u30de\u30b7\u30f3\u306e\u5404host\u6bce\u306e\u8a3c\u660e\u66f8\u306e\u66f4\u65b0<\/strong>
\n\u3053\u308c\u307e\u3067\u306e\u8a2d\u5b9a\u3060\u3051\u3067\u306fosirismd\u3078\u306e\u30ed\u30b0\u30a4\u30f3\u306f\u3067\u304d\u307e\u3059\u304chost\u8a2d\u5b9a\u3092\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u4ee5\u4e0b\u306e\u30a8\u30e9\u30fc\u306b\u306a\u308a\u63a5\u7d9a\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u305b\u3093\u3002<\/p>\n

[code]osiris-3.0.4-current: host RemoteServer
\nerror: session key negotiation with remote host failed.
\n[\/code]<\/p>\n

\u3053\u308c\u3092\u56de\u907f\u3059\u308b\u305f\u3081\u306b\u306fhost\u3067\u8a2d\u5b9a\u3057\u305fRemoteServer\u306bssh\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u4ee5\u4e0b\u306e\u64cd\u4f5c\u3092\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

[code]$ sudo mv \/usr\/local\/osiris\/osiris_root.pem \/usr\/local\/osiris\/old_osirisroot.pem
\n$ sudo SystemStarter restart “Osiris IDS”
\n[\/code]<\/p>\n

\u3053\u306e\u64cd\u4f5c\u3092\u3057\u305f\u4e0a\u3067osirismd\u306badmin\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u4ee5\u4e0b\u306e\u64cd\u4f5c\u3092\u3057\u307e\u3059\u3002<\/p>\n

[code]osiris-3.0.4-current: host RemoteServer<\/p>\n

RemoteServer is alive.
\nosiris-3.0.4-current[RemoteServer]: status<\/p>\n

[ current status of host: RemoteServer ]
\ncurrent time: Thu Apr 14 13:59:49 2005
\nup since: Thu Apr 14 13:59:07 2005
\ndaemon status: idle.
\nconfig status: no config present.\u3000\u2190\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u304c\u6d88\u3048\u3066\u3044\u308b\u306e\u3067\u6ce8\u610f
\nosiris version: 3.0.4-current
\nOS: Darwin 7.8.0<\/p>\n

osiris-3.0.4-current[RemoteServer]: push-config\u3000\u2190\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092Push\u3059\u308b<\/p>\n

the config: (default.darwin) was succesfully pushed to host: RemoteServer<\/p>\n

osiris-3.0.4-current[RemoteServer]: status<\/p>\n

[ current status of host: RemoteServer ]
\ncurrent time: Thu Apr 14 14:00:47 2005
\nup since: Thu Apr 14 13:59:07 2005
\nlast config push: Thu Apr 14 14:00:35 2005
\nconfiguration id: cc4f6e68
\ndaemon status: idle.<\/p>\n

config status: current config is valid.\u3000\u2190\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u304c\u6709\u52b9\u306b\u306a\u3063\u305f<\/p>\n

osiris version: 3.0.4-current
\nOS: Darwin 7.8.0<\/p>\n

osiris-3.0.4-current[RemoteServer]: start-scan\u3000\u2190\u30b9\u30ad\u30e3\u30f3\u3092\u5b9f\u884c<\/p>\n

scanning process was started on host: RemoteServer \u3000\u2190\u30b9\u30ad\u30e3\u30f3\u6210\u529f
\n[\/code]<\/p>\n

\u3053\u3053\u307e\u3067\u3084\u3063\u3066\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u304c\u5b8c\u4e86\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

\u203b\u518d\u63b2\u8f09\u306b\u5f53\u305f\u3063\u3066\u4e00\u90e8\u4fee\u6b63\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u25a0 [osiris]OSX\u7528\u306e\u304a\u3059\u3059\u3081\u8a2d\u5b9a\uff08WSM\u304b\u3089\u672c\u4eba\u6295\u7a3f\u3092\u518d\u63b2\u8f09 2004\u5e742\u6708\uff09 \u524d\u56de\u307e\u3067\u306b\u8a2d\u5b9a\u3057\u305f\u30de\u30b7\u30f3myclient01\u306fOS\u6a19\u6e96\u306e\u691c\u77e5\u8a2d\u5b9a\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002OSX\u7528\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u8868\u793a\u3055\u308c\u307e\u3059\u3002\u8a2d\u5b9a\u306e\u66f8\u5f0f\u306fa … Continue reading “\u4fb5\u5165\u691c\u77e5\u7cfb\u306e\u899a\u3048\u66f8\u304d\uff08\uff13\uff09”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[190,18,13],"class_list":["post-35","post","type-post","status-publish","format-standard","hentry","category-osx","tag-ids","tag-oldhatena","tag-osiris"],"_links":{"self":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/35","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/comments?post=35"}],"version-history":[{"count":3,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/35\/revisions"}],"predecessor-version":[{"id":2347,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/35\/revisions\/2347"}],"wp:attachment":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/media?parent=35"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/categories?post=35"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/tags?post=35"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}