Install and Configure Osiris for Linux - Host Integrity Monitoring System

1. Osiris Installation Guide
i | P a g e
Table of Contents
Overview ...........................................................................................................................................1
Applies To..........................................................................................................................................1
Pre-requisites.....................................................................................................................................1
Download – Osiris...............................................................................................................................1
Linux Variants.................................................................................................................................1
Ubuntu...........................................................................................................................................1
Extract – Osiris...................................................................................................................................2
Build – configure ................................................................................................................................2
Build - Make Console..........................................................................................................................3
Build - Make Agent.............................................................................................................................4
Build – Make Install – Installation ........................................................................................................5
Build – Start Installation......................................................................................................................5
Agent Installation ...............................................................................................................................6
Start Management Console.................................................................................................................7
Run - Osiris Management Agent..........................................................................................................8
Login – Agent CLI User........................................................................................................................9
Login – Password................................................................................................................................9
Listing Hosts.....................................................................................................................................10
Add New-Host..................................................................................................................................10
Connect – Host.................................................................................................................................11
Start Scan – (start-scan) ....................................................................................................................12
Push Configuration(push-config).......................................................................................................12
Troubleshooting...............................................................................................................................12
Error Loading Shared Libraries: libssl.so.10.....................................................................................12
Resolution ................................................................................................................................12
Unable toload root certificate for management host......................................................................13
Resolution ................................................................................................................................13
config.status: error: cannot find inputfile: `Makefile.in'..................................................................14
Resolution ................................................................................................................................14

2. Osiris Installation Guide
1 | P a g e
Overview
Osiris is Host integrity monitoring system for windows and Linux operating system. This guide will help
you in installing osiris agent on Linux operating system(s).
Applies To
All Linux, Ubuntu – Osiris Version 4.2.3
Pre-requisites
 gcc
 make
 openssl, openssl-devel
Download – Osiris
Linux Variants
wget https://launchpad.net/osiris/main/4.2.3/+download/osiris-4.2.3.tar.gz
Ubuntu
wget https://launchpad.net/ubuntu/+archive/primary/+files/osiris_4.2.3.orig.tar.gz

3. Osiris Installation Guide
2 | P a g e
Extract – Osiris
After downloading, extract the compressed source file, run the tar command as per below command
tar -zxvf osiris-4.2.3.tar.gz
Build – configure
After extracting and switching to the source extracted directory, configure Osiris source code, run the
command as per below
cd /tmp/osiris-4.2.3/
./configure

4. Osiris Installation Guide
3 | P a g e
Build - Make Console
To create Management console installer, run the command “make console”
make console

5. Osiris Installation Guide
4 | P a g e
Build - Make Agent
To create osiris agent installer, run the command “make agent”
make agent

6. Osiris Installation Guide
5 | P a g e
Build – Make Install – Installation
Afterbuilding,toinstallthe managementconsole,agent,CLI;runthe command“make install”.Itwillstart
the Osiris installation process.
make install
Build – Start Installation
Press the key “Y” to start the installation process of Osiris.

7. Osiris Installation Guide
6 | P a g e
Agent Installation
Osiris installs the agent with osiris user and osiris group; start process for of agent installation.

8. Osiris Installation Guide
7 | P a g e
Start Management Console
/usr/local/sbin/osiris
Uponstartingosiris installation,anexistingcertificatewillbe loaded,elseanew certificatewillbe created
for communication with 2048 bit encryption.

9. Osiris Installation Guide
8 | P a g e
Run - Osiris Management Agent
When you the osiris command, existing certificate information will be validated and it needs to be
accepted, as per the below screenshot; post “yes” to accept the certification.

10. Osiris Installation Guide
9 | P a g e
Login – Agent CLI User
After installation, execute “/usr/local/sbin/osiris” login to management host. You need to login with
userId “admin” and blank password.
Set new password, execute the command “passwd”
Login – Password
After setting the new password you can log back in, you will not be notified about blank password.

11. Osiris Installation Guide
10 | P a g e
Listing Hosts
Run the command “list-hosts” to list the currently configured hosts in the Osiris.
Add New-Host
To add a newhost to the osirisintegritymanagementsystem, runthe command “new-host”and follow
the instructions.

12. Osiris Installation Guide
11 | P a g e
Connect – Host
AfterloginintoOsiris,toconnecttoone of the existinghost,executethe command“host”withhostname
name parameter. If the connection to the host is successful; you will get reply message “<hostname> is
alive”.
host virt01ap10pr

13. Osiris Installation Guide
12 | P a g e
Start Scan – (start-scan)
To start the integrity scan, execute the command “start-scan <hostname>”. With no config found.
Push Configuration (push-config)
Pushing configuration to a host.
Troubleshooting
Error Loading Shared Libraries: libssl.so.10
You would get this error while launching “osirisd” daemon.
Resolution
This issue can be resolved by installing the openssl, openssl-devel packages with new version.
yum provides libssl.so.10 # To query the repository with the file named “libssl.so.10”
yum install -y openssl openssl-devel

14. Osiris Installation Guide
13 | P a g e
Unable to load root certificate for management host
You would get this error while launching “osiris”; stating error, see the screenshot below.
(/root/.osiris/osiris_root.pem)
Resolution
Copy the “osiris_root.pem” file from the Osiris management server to root “/root/.osiris” folder. And
also, change the permission to “rw” to root user only.
cp /tmp/osiris_root.pem /root/.osiris/
chmod 600 /root/.osiris/osiris_root.pem

15. Osiris Installation Guide
14 | P a g e
config.status: error: cannot find input file: `Makefile.in'
When you run “./configure”;
Resolution
Run command as per the below.
autoheader
&& aclocal
&& libtoolize --ltdl --copy --force
&& automake --add-missing --copy
&& autoconf
&& ./configure