Beltane

Beltane is a web-based central management console for the Samhain file integrity / intrusion detection system. It enables the administrator to browse client messages, acknowledge them, and update centrally stored file signature databases.

As the Samhain daemon keeps a memory of file changes, the file signature database need only be up to date when the daemon restarts and downloads the database from the central server. Beltane allows you to use the information logged by the client in order to update the signature database. Requirements

Beltane requires a Samhain (version 1.6.0 or higher) client/server installation, with file signature databases stored on the central server, and logging to an SQL database enabled.

Beltane is a PHP application, with some additional components written in C. It requires PHP version 4.3 or later, compiled as Apache module or as CGI interpreter.

On the client side, Beltane requires a Javascript capable browser, with cookies enabled. We recommend Mozilla/Firefox, as it is rumoured to be the most standard-conforming browser, but most inferior browsers may work as well.

Installation

cd /opt/
wget http://la-samhna.de/beltane/beltane-1.0.14.tar.gz
tar zxvf beltane-1.0.14.tar.gz
cd beltane-1.0.14
mkdir /var/www/beltane
./configure --with-php-dir=/var/www/beltane --with-php-extension=php --enable-mod-php --with-user=apache

Check the readout at this point, to make sure everything is set up as you expect, if so:

make
make install
apache2ctl restart
 
beltane.txt · Last modified: 2008/11/06 09:32 by andylockran
 
Recent changes RSS feed Creative Commons License Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki