search

DataSoft / Honeyd

virtual honeypots
GNU General Public License v2.0
348 stars 101 forks source link

Log start error, permission denied #89

Open DarkmatterVale opened 10 years ago

DarkmatterVale commented 10 years ago

When I was trying to install Honeyd on the Raspberry Pi using the Raspbian wheezy image, the log files couldn't be opened because permission was denied. I changed the permissions but it still wouldn't work. I found a website where someone reported the same thing. The link is: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484498.

Anyone have any ideas as for how I can fix this? Thanks

nullprobe commented 10 years ago

Same as Issue #7 ?

DarkmatterVale commented 10 years ago

I think so. Looks that way. If I use Nova, will that help solve the problem?

awaldow commented 10 years ago

Judging from what's in the bug report linked in the original post it's due to honeyd running (and thus creating any files it would create) as the nobody user, in the nobody group. This is done for security reasons (because honeyd is completely network centric, who knows how it's vulnerable). In the bug report it looks like they're pushing a patch wherein honeyd will no longer overwrite explicit -u and -g declarations with nobody.

Note that, in #7, PherricOxide refers to Nova's post install script setting the permissions for those log files s.t. they're readable (I haven't looked at it in a while, but I think it's chown-ing those files as well) and usable. For reference, he's referring to https://github.com/DataSoft/Nova/blob/master/debian/postinst, line 31 where we chown -R the honeyd log directory to be under the nova group (substitute whatever user you're running honeyd as). Might be a good place to start.

DarkmatterVale commented 10 years ago

Thanks. I will start there. Also, it is not exactly like issue 7. I am not using nova on my Pi.

awaldow commented 10 years ago

I understand you aren't using Nova on your pi, but the version of Honeyd in this repo is to some degree modified with Nova in mind. There are some install considerations that must be addressed if trying to use it as its own application which would normally be handled by installing Nova that must now be done by hand.

DarkmatterVale commented 10 years ago

I did not know this. I will install nova and see if I can get it to work.