cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

Cuckoo permission denied for .vmx file on a Mac OS Host #1935

Open Safeone opened 6 years ago

Safeone commented 6 years ago

Can you help me please with this issue ?

I am facing an issue when I try to run the cuckoo sandbox after all the installation.

Host Machine: macOS machine with VMware Fusion running. Guest : Windows VM

I installed the Cuckoo Sandbox in a virtual environment within macOS. I did edit the vmware.conf, memorey.conf, cuckoo.conf & processing.conf files.

When i do run the "cuckoo" command to start; it says it doesnt have permisssion to access the .vmx file I mentioned in the "vmware.conf" file.

I have given 777 permission to the entire folder, and gave ownership of the virtual machines folder to the user. Not sure why the system gives me such an error.

"2017-11-05 16:03:30,459 [cuckoo.core.scheduler] INFO: Using "vmware" as machine manager 2017-11-05 16:03:30,668 [cuckoo] CRITICAL: CuckooCriticalError: Error initializing machines: Wrong configuration: vm path not ending with .vmx: /Users/safe/Virtual Machines.localized/Windows 10 x64.vmwarevm/Windows 10 x6)"

daanfs commented 6 years ago

@Safeone: The error you posted doesn't say anything about permissions. Seems the .vmx extension is missing from the vm path directive in your configuration file.

Safeone commented 6 years ago

@daanfs : I'm sorry it was a mistake , here is the error : 2017-11-07 09:35:46,386 [cuckoo.core.scheduler] INFO: Using "vmware" as machine manager 2017-11-07 09:35:46,622 [cuckoo] CRITICAL: CuckooCriticalError: Error initializing machines: Unable to get snapshot list for /Users/safeone/Documents/Virtual Machines.localized/Windows 10 x64.vmwarevm/Windows 10 x64.vmx. Reason: [Errno 13] Permission denied

daanfs commented 6 years ago

@Safeone: does your cuckoo user have permission to execute vmrun? Which version of MacOS and VMWare are you using?

Safeone commented 6 years ago

@daanfs : yes the cuckoo user can execute vmrun , i did it using the cli. I'm using MacOS Sierra 10.12.6 and VMWare Fusion 8.5.6

Safeone commented 6 years ago

@daanfs : I Updated VMWare to the VMWare fusion to 10.0.1 , and it's giving me back the same error.

Safeone commented 6 years ago

@heipei @espenfjo @mak @XayOn Can someone help me with this issue please ?

malwarefun commented 6 years ago

Did you get a resolution to this? I'm also having this issue.

malwarefun commented 6 years ago

Fixed it for me, it was a path issue with vmrun