Skip to content
Snippets Groups Projects
Commit 2e6d216b authored by Tomáš Plesník's avatar Tomáš Plesník
Browse files

zmena defaultniho db usera na root; odstraneni SSLv2 v Cipher Suite; uprava formatovani + zacisteni

parent 1a98168b
No related branches found
No related tags found
No related merge requests found
...@@ -119,14 +119,15 @@ C. Installation ...@@ -119,14 +119,15 @@ C. Installation
-h print this help -h print this help
-V print script version number and exit -V print script version number and exit
Example: $ ./install.sh -d /opt/warden-server
Example: # ./install.sh -d /opt/warden-server
-k /etc/ssl/private/server.key -k /etc/ssl/private/server.key
-c /etc/ssl/certs/server.pem -c /etc/ssl/certs/server.pem
-a /etc/ssl/certs/bundle.pem -a /etc/ssl/certs/bundle.pem
-e admin@domain.com -e admin@domain.com
-s /usr/local/bin -s /usr/local/bin
For more information about installation process, see README file (section Installation).
4. Configuration files 4. Configuration files
You are advised to check configuration file warden-apache.conf and You are advised to check configuration file warden-apache.conf and
...@@ -163,7 +164,7 @@ C. Installation ...@@ -163,7 +164,7 @@ C. Installation
e.g. warden e.g. warden
DB_USER - MySQL database user of Warden server DB_USER - MySQL database user of Warden server
e.g. warden e.g. root
DB_PASS - MySQL database password of Warden server DB_PASS - MySQL database password of Warden server
...@@ -176,11 +177,24 @@ C. Installation ...@@ -176,11 +177,24 @@ C. Installation
VALID_STRINGS - validation hash containing allowed event attributes VALID_STRINGS - validation hash containing allowed event attributes
e.g. e.g.
'type'=> ['portscan',\
%VALID_STRINGS = ( 'bruteforce',\
'type' => ['portscan', 'bruteforce', 'probe', 'spam', 'phishing', 'botnet_c_c', 'dos', 'malware', 'copyright', 'webattack', 'vulnerability', 'test', 'other'], 'probe',\
'source_type' => ['IP', 'URL', 'Reply-To:'] 'spam',\
); 'phishing',\
'botnet_c_c',\
'dos',\
'malware',\
'copyright',\
'webattack',\
'vulnerability',\
'test',\
'other'\
],
'source_type' => ['IP',\
'URL',\
'Reply-To:'\
]
b) warden-apache.conf b) warden-apache.conf
...@@ -193,7 +207,7 @@ C. Installation ...@@ -193,7 +207,7 @@ C. Installation
SSLVerifyClient require SSLVerifyClient require
SSLOptions +StdEnvVars +ExportCertData SSLOptions +StdEnvVars +ExportCertData
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
SSLCertificateFile <path_to_server_certificate> SSLCertificateFile <path_to_server_certificate>
SSLCertificateKeyFile <path_to_server_certificate_key> SSLCertificateKeyFile <path_to_server_certificate_key>
...@@ -216,15 +230,15 @@ D. Update ...@@ -216,15 +230,15 @@ D. Update
For more information about update.sh options run update.sh -h For more information about update.sh options run update.sh -h
Usage: $ ./update.sh -d <directory> [-hV] Usage: $ ./update.sh -d <directory> [-shV]
-d <directory> destination directory -d <directory> destination directory
-s <directory> directory for symlinks to Warden server control scripts (optional)
-h print this help -h print this help
-V print script version number and exit -V print script version number and exit
Example: # ./update.sh -d /opt/warden-server Example: $ ./update.sh -d /opt/warden-server
For more information about post-update steps see UPDATE file in 'doc' For more information about post-update steps see UPDATE file.
directory.
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment