mirror of https://github.com/MISP/MISP
Merge branch '2.4' of github.com:MISP/MISP into 2.4
iglocska
commit
8716be87fa
|
|
@ -10,16 +10,16 @@
|
|||
############################################################
|
||||
#INSTALLATION INSTRUCTIONS #
|
||||
##########################################################
|
||||
#------------------------- for Debian Flavored Linux Distributions
|
||||
#------------------------- for Linux Distributions
|
||||
#
|
||||
#-------------------------------------------------------|
|
||||
# 0/ Quick MISP Instance on Debian Based Linux - Status |
|
||||
#-------------------------------------------------------|
|
||||
#
|
||||
# 20200513: Ubuntu 20.04 tested and working. -- sCl
|
||||
# 20200412: Ubuntu 18.04.4 tested and working. -- sCl
|
||||
# 20190302: Ubuntu 18.04.2 tested and working. -- sCl
|
||||
# 20190208: Kali Linux tested and working. -- sCl
|
||||
# 20210401: Ubuntu 21.04 tested and working. -- sCl
|
||||
# 20210401: Ubuntu 20.04.2 tested and working. -- sCl
|
||||
# 20210401: Ubuntu 18.04.5 tested and working. -- sCl
|
||||
# 20210331: Kali Linux 2021.1 tested and working. -- sCl
|
||||
#
|
||||
#
|
||||
#-------------------------------------------------------------------------------------------------|
|
||||
|
|
@ -88,6 +88,7 @@
|
|||
## 2_logRotation.sh ##
|
||||
## 2_backgroundWorkers.sh ##
|
||||
## 3_misp-modules.sh ##
|
||||
## 3_misp-modules-cake.sh ##
|
||||
## 4_misp-dashboard.sh ##
|
||||
## 4_misp-dashboard-cake.sh ##
|
||||
## 5_mail_to_misp.sh ##
|
||||
|
|
@ -147,12 +148,12 @@ generateInstaller () {
|
|||
cp ../INSTALL.tpl.sh .
|
||||
|
||||
# Pull code snippets out of Main Install Documents
|
||||
for f in `echo INSTALL.ubuntu2004.md INSTALL.ubuntu1804.md xINSTALL.debian9.md INSTALL.kali.md xINSTALL.debian10.md xINSTALL.tsurugi.md xINSTALL.debian9-postgresql.md xINSTALL.ubuntu1804.with.webmin.md INSTALL.rhel7.md`; do
|
||||
for f in `echo INSTALL.ubuntu2004.md INSTALL.ubuntu1804.md xINSTALL.debian10.md xINSTALL.tsurugi.md INSTALL.rhel7.md INSTALL.rhel8.md`; do
|
||||
xsnippet . ../../docs/${f}
|
||||
done
|
||||
|
||||
# Pull out code snippets from generic Install Documents
|
||||
for f in `echo globalVariables.md mail_to_misp-debian.md MISP_CAKE_init.md misp-dashboard-debian.md misp-modules-debian.md gnupg.md ssdeep-debian.md sudo_etckeeper.md supportFunctions.md viper-debian.md misp-modules-centos.md`; do
|
||||
for f in `echo globalVariables.md mail_to_misp-debian.md MISP_CAKE_init.md misp-dashboard-debian.md misp-dashboard-centos.md misp-dashboard-cake.md misp-modules-debian.md misp-modules-centos.md misp-modules-cake.md gnupg.md ssdeep-debian.md sudo_etckeeper.md supportFunctions.md viper-debian.md`; do
|
||||
xsnippet . ../../docs/generic/${f}
|
||||
done
|
||||
|
||||
|
|
@ -181,6 +182,7 @@ generateInstaller () {
|
|||
perl -pe 's/^## 2_logRotation.sh ##/`cat 2_logRotation.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 2_backgroundWorkers.sh ##/`cat 2_backgroundWorkers.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 2_core-cake.sh ##/`cat 2_core-cake.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 3_misp-modules-cake.sh ##/`cat 3_misp-modules-cake.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 3_misp-modules.sh ##/`cat 3_misp-modules.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 4_misp-dashboard-cake.sh ##/`cat 4_misp-dashboard-cake.sh`/ge' -i INSTALL.tpl.sh
|
||||
perl -pe 's/^## 4_misp-dashboard.sh ##/`cat 4_misp-dashboard.sh`/ge' -i INSTALL.tpl.sh
|
||||
|
|
@ -661,7 +663,7 @@ installMISPRHEL () {
|
|||
fi
|
||||
|
||||
debug "Enabling Extras Repos (SCL)"
|
||||
if [[ "${FLAVOUR}" == "rhel" ]]; then
|
||||
if [[ "${DISTRI}" == "rhel7" ]]; then
|
||||
sudo subscription-manager register --auto-attach
|
||||
enableReposRHEL
|
||||
enableEPEL
|
||||
|
|
@ -782,13 +784,19 @@ fi
|
|||
SUPPORT_MAP="
|
||||
x86_64-centos-7
|
||||
x86_64-rhel-7
|
||||
x86_64-fedora-30
|
||||
x86_64-centos-8
|
||||
x86_64-rhel-8
|
||||
x86_64-fedora-33
|
||||
x86_64-debian-stretch
|
||||
x86_64-debian-buster
|
||||
x86_64-ubuntu-bionic
|
||||
x86_64-ubuntu-focal
|
||||
x86_64-ubuntu-hirsute
|
||||
x86_64-kali-2020.4
|
||||
x86_64-kali-2021.1
|
||||
x86_64-kali-2021.2
|
||||
x86_64-kali-2021.3
|
||||
x86_64-kali-2021.4
|
||||
armv6l-raspbian-stretch
|
||||
armv7l-raspbian-stretch
|
||||
armv7l-debian-jessie
|
||||
|
|
@ -893,7 +901,7 @@ if [[ "${FLAVOUR}" == "kali" ]]; then
|
|||
fi
|
||||
|
||||
# If RHEL/CentOS is detected, run appropriate script
|
||||
if [[ "${FLAVOUR}" == "rhel" ]] || [[ "${FLAVOUR}" == "centos" ]]; then
|
||||
if [[ "${FLAVOUR}" == "rhel" ]] || [[ "${FLAVOUR}" == "centos" ]] || [[ "${FLAVOUR}" == "fedora" ]]; then
|
||||
installMISPRHEL
|
||||
echo "Installation done !"
|
||||
exit
|
||||
|
|
|
|||
|
|
@ -1 +0,0 @@
|
|||
../docs/xINSTALL.centos6.md
|
||||
|
|
@ -1 +0,0 @@
|
|||
../docs/xINSTALL.debian9-postgresql.md
|
||||
|
|
@ -1 +0,0 @@
|
|||
../docs/xINSTALL.debian9.md
|
||||
|
|
@ -1 +0,0 @@
|
|||
../docs/xINSTALL.ubuntu1804.with.webmin.md
|
||||
2
PyMISP
2
PyMISP
|
|
@ -1 +1 @@
|
|||
Subproject commit 51edb8ab33c5ee6bd3b9b05ea5809299f37c4fbe
|
||||
Subproject commit 4a0c1e1dc42af171d3c1bcaa12436f79ff6cfd9b
|
||||
|
|
@ -26,7 +26,7 @@ class AppController extends Controller
|
|||
public $helpers = array('OrgImg', 'FontAwesome', 'UserName', 'DataPathCollector');
|
||||
|
||||
private $__queryVersion = '127';
|
||||
public $pyMispVersion = '2.4.140';
|
||||
public $pyMispVersion = '2.4.141';
|
||||
public $phpmin = '7.2';
|
||||
public $phprec = '7.4';
|
||||
public $phptoonew = '8.0';
|
||||
|
|
|
|||
|
|
@ -177,7 +177,15 @@
|
|||
}
|
||||
?>
|
||||
<span class="bold"><?php echo __('UUID: ');?></span><span class="ObjectUUID"><?php echo h($object['uuid']); ?></span><br />
|
||||
<span class="bold"><?php echo __('Meta Category: ');?></span><span class="ObjectMetaCategory"><?php echo h($object['meta-category']); ?></span>
|
||||
<span class="bold"><?php echo __('Meta Category: ');?></span><span class="ObjectMetaCategory"><?php echo h($object['meta-category']); ?></span><br />
|
||||
<?php
|
||||
if (!empty($object['first_seen'])) {
|
||||
echo '<span class="bold">First seen: </span><span class="ObjectFirstSeen">' . h($object['first_seen']) . '</span><br/>';
|
||||
}
|
||||
if (!empty($object['last_seen'])) {
|
||||
echo '<span class="bold">Last seen: </span><span class="ObjectLastSeen">' . h($object['last_seen']) . '</span><br/>';
|
||||
}
|
||||
?>
|
||||
</div>
|
||||
<span class="bold"><?php echo __('References: ')?></span>
|
||||
<?php
|
||||
|
|
|
|||
|
|
@ -2803,6 +2803,12 @@ function moduleResultsSubmit(id) {
|
|||
if ($(this).has('.TemplateUUID').length) {
|
||||
temp['template_uuid'] = $(this).find('.TemplateUUID').text();
|
||||
}
|
||||
if ($(this).has('.ObjectFirstSeen').length) {
|
||||
temp['first_seen'] = $(this).find('.ObjectFirstSeen').text();
|
||||
}
|
||||
if ($(this).has('.ObjectLastSeen').length) {
|
||||
temp['last_seen'] = $(this).find('.ObjectLastSeen').text();
|
||||
}
|
||||
if ($(this).has('.ObjectReference').length) {
|
||||
var references = [];
|
||||
$(this).find('.ObjectReference').each(function() {
|
||||
|
|
|
|||
|
|
@ -1,8 +1,8 @@
|
|||
# INSTALLATION INSTRUCTIONS
|
||||
## for Kali Linux 2020.4
|
||||
## for Kali Linux 2021.1
|
||||
# 0/ Quick MISP Instance on Kali Linux - Status
|
||||
|
||||
This has been tested by @SteveClement on 20210203
|
||||
This has been tested by @SteveClement on 20210331
|
||||
|
||||
# 1/ Prepare Kali with a MISP User
|
||||
|
||||
|
|
|
|||
|
|
@ -25,7 +25,7 @@
|
|||
wget -O /tmp/INSTALL.sh https://raw.githubusercontent.com/MISP/MISP/2.4/INSTALL/INSTALL.sh
|
||||
bash /tmp/INSTALL.sh -c
|
||||
```
|
||||
**The above does NOT work yet**
|
||||
**The above does NOT fully work yet**
|
||||
|
||||
!!! notice
|
||||
If the next line is `[!generic/community.md!]()` [click here](https://misp.github.io/MISP/INSTALL.rhel7/).
|
||||
|
|
@ -37,18 +37,15 @@
|
|||
{!generic/rhelVScentos.md!}
|
||||
|
||||
!!! warning
|
||||
The core MISP team cannot verify if this guide is working or not. Please help us in keeping it up to date and accurate.
|
||||
The core MISP team cannot easily verify if this guide is working or not. Please help us in keeping it up to date and accurate.
|
||||
Thus we also have difficulties in supporting RHEL issues but will do a best effort on a similar yet slightly different setup.
|
||||
|
||||
!!! notice
|
||||
This document also serves as a source for the [INSTALL-misp.sh](https://github.com/MISP/MISP/blob/2.4/INSTALL/INSTALL.sh) script.
|
||||
Which explains why you will see the use of shell *functions* in various steps.
|
||||
Henceforth the document will also follow a more logical flow. In the sense that all the dependencies are installed first then config files are generated, etc...
|
||||
|
||||
!!! notice
|
||||
Maintenance for CentOS 7 will end on: June 30th, 2024 [Source[0]](https://wiki.centos.org/About/Product) [Source[1]](https://linuxlifecycle.com/)
|
||||
CentOS 7-1908 [NetInstallURL](http://mirror.centos.org/centos/7/os/x86_64/)
|
||||
|
||||
{!generic/manual-install-notes.md!}
|
||||
|
||||
This document details the steps to install MISP on Red Hat Enterprise Linux 7.x (RHEL 7.x) and CentOS 7.x.
|
||||
At time of this writing it was tested on versions 7.6 for both.
|
||||
This is a joint RHEL/CentOS install guide. The authors tried to make it contextually evident what applies to which flavor.
|
||||
|
|
@ -93,13 +90,13 @@ sudo subscription-manager register --auto-attach # register your system to an ac
|
|||
|
||||
## 1.4/ **[RHEL]** Enable the optional, extras and Software Collections (SCL) repos
|
||||
```bash
|
||||
# <snippet-begin 0_RHEL_SCL.sh>
|
||||
enableReposRHEL () {
|
||||
# <snippet-begin 0_RHEL7_SCL.sh>
|
||||
enableReposRHEL7 () {
|
||||
sudo subscription-manager refresh
|
||||
sudo subscription-manager repos --enable rhel-7-server-optional-rpms
|
||||
sudo subscription-manager repos --enable rhel-7-server-extras-rpms
|
||||
}
|
||||
# <snippet-end 0_RHEL_SCL.sh>
|
||||
# <snippet-end 0_RHEL7_SCL.sh>
|
||||
```
|
||||
|
||||
## 1.4c/ **[CentOS]** Enable EPEL for additional dependencies
|
||||
|
|
@ -149,14 +146,14 @@ yumUpdate () {
|
|||
|
||||
## 1.6/ **[RHEL]** Install the EPEL and remi repo
|
||||
```bash
|
||||
# <snippet-begin 0_RHEL_EPEL.sh>
|
||||
# <snippet-begin 0_RHEL7_EPEL.sh>
|
||||
enableEPEL () {
|
||||
sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm -y
|
||||
sudo yum install http://rpms.remirepo.net/enterprise/remi-release-7.rpm -y
|
||||
sudo yum install yum-utils -y
|
||||
sudo yum-config-manager --enable remi-php74
|
||||
}
|
||||
# <snippet-end 0_RHEL_EPEL.sh>
|
||||
# <snippet-end 0_RHEL7_EPEL.sh>
|
||||
```
|
||||
|
||||
### 2/ Dependencies
|
||||
|
|
@ -227,8 +224,8 @@ sudo systemctl enable --now haveged.service
|
|||
## 3.01/ Download MISP code using git in /var/www/ directory
|
||||
|
||||
```bash
|
||||
# <snippet-begin 1_mispCoreInstall_RHEL.sh>
|
||||
installCoreRHEL () {
|
||||
# <snippet-begin 1_mispCoreInstall_RHEL7.sh>
|
||||
installCoreRHEL7 () {
|
||||
# Download MISP using git in the $PATH_TO_MISP directory.
|
||||
sudo mkdir -p $(dirname $PATH_TO_MISP)
|
||||
sudo chown $WWW_USER:$WWW_USER $(dirname $PATH_TO_MISP)
|
||||
|
|
@ -326,7 +323,7 @@ installCoreRHEL () {
|
|||
sudo systemctl restart php-fpm.service
|
||||
umask $UMASK
|
||||
}
|
||||
# <snippet-end 1_mispCoreInstall_RHEL.sh>
|
||||
# <snippet-end 1_mispCoreInstall_RHEL7.sh>
|
||||
```
|
||||
|
||||
### 4/ CakePHP
|
||||
|
|
@ -380,9 +377,9 @@ installCake_RHEL ()
|
|||
|
||||
### 5/ Set file permissions
|
||||
```bash
|
||||
# <snippet-begin 2_permissions_RHEL.sh>
|
||||
# <snippet-begin 2_permissions_RHEL7.sh>
|
||||
# Main function to fix permissions to something sane
|
||||
permissions_RHEL () {
|
||||
permissions_RHEL7 () {
|
||||
sudo chown -R $WWW_USER:$WWW_USER $PATH_TO_MISP
|
||||
## ? chown -R root:$WWW_USER $PATH_TO_MISP
|
||||
sudo find $PATH_TO_MISP -type d -exec chmod g=rx {} \;
|
||||
|
|
@ -403,7 +400,7 @@ permissions_RHEL () {
|
|||
sudo chown -R $WWW_USER:$WWW_USER $PATH_TO_MISP/app/webroot/img/orgs
|
||||
sudo chown -R $WWW_USER:$WWW_USER $PATH_TO_MISP/app/webroot/img/custom
|
||||
}
|
||||
# <snippet-end 2_permissions_RHEL.sh>
|
||||
# <snippet-end 2_permissions_RHEL7.sh>
|
||||
```
|
||||
|
||||
### 6/ Create database and user
|
||||
|
|
@ -683,12 +680,16 @@ configWorkersRHEL () {
|
|||
# <snippet-end 3_configWorkers_RHEL.sh>
|
||||
```
|
||||
|
||||
{!generic/misp-modules-centos.md!}
|
||||
|
||||
{!generic/MISP_CAKE_init.md!}
|
||||
|
||||
{!generic/misp-modules-centos.md!}
|
||||
|
||||
{!generic/misp-modules-cake.md!}
|
||||
|
||||
{!generic/misp-dashboard-centos.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/INSTALL.done.md!}
|
||||
|
||||
{!generic/recommended.actions.md!}
|
||||
|
|
|
|||
|
|
@ -1,10 +1,11 @@
|
|||
# INSTALLATION INSTRUCTIONS for RHEL 8.x, CentOS8/Stream
|
||||
-------------------------
|
||||
|
||||
### -2/ RHEL8/CentOS8 - status
|
||||
### -2/ RHEL8/CentOS8/CentOS_Stream/Fedora33 - status
|
||||
-------------------------
|
||||
!!! notice
|
||||
MISP-core and misp-modules Tested working by [@SteveClement](https://twitter.com/SteveClement) on 20210326
|
||||
Tested fully working without SELinux by [@SteveClement](https://twitter.com/SteveClement) on 20210401
|
||||
TODO: Fix SELinux permissions, *pull-requests welcome*.
|
||||
|
||||
!!! notice
|
||||
This document also serves as a source for the [INSTALL-misp.sh](https://github.com/MISP/MISP/blob/2.4/INSTALL/INSTALL.sh) script.
|
||||
|
|
@ -14,7 +15,7 @@
|
|||
### -1/ Installer and Manual install instructions
|
||||
|
||||
!!! warning
|
||||
In the **future**, to install MISP on a fresh RHEL 8 install all you need to do is:
|
||||
In the **future**, to install MISP on a fresh RHEL 8 or CentOS 8 install all you need to do is:
|
||||
|
||||
```bash
|
||||
# Please check the installer options first to make the best choice for your install
|
||||
|
|
@ -44,6 +45,8 @@
|
|||
Maintenance for CentOS 8 will end on: December 31st, 2021 [Source[0]](https://wiki.centos.org/About/Product) [Source[1]](https://linuxlifecycle.com/)
|
||||
CentOS 8 [NetInstallURL](http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=BaseOS)
|
||||
|
||||
{!generic/manual-install-notes.md!}
|
||||
|
||||
This document details the steps to install MISP on Red Hat Enterprise Linux 8.x (RHEL 8.x) and CentOS 8.x.
|
||||
At time of this writing it was tested on versions 8.0 for RHEL.
|
||||
This is a joint RHEL/CentOS install guide. The authors tried to make it contextually evident what applies to which flavor.
|
||||
|
|
@ -83,30 +86,35 @@ sudo hostnamectl set-hostname misp.local # Your choice, in a production environm
|
|||
Can be skipped if the Machine has been registered during install phase.
|
||||
```bash
|
||||
# <snippet-begin 0_RHEL_register.sh>
|
||||
sudo subscription-manager register --auto-attach # register your system to an account and attach to a current subscription
|
||||
registerRHEL () {
|
||||
sudo subscription-manager register --auto-attach # register your system to an account and attach to a current subscription
|
||||
}
|
||||
# <snippet-end 0_RHEL_register.sh>
|
||||
```
|
||||
|
||||
## 1.4/ **[RHEL]** Enable the optional repos (obsolete in v8)
|
||||
```bash
|
||||
# <snippet-begin 0_RHEL_SCL.sh>
|
||||
sudo subscription-manager refresh
|
||||
# The following is needed for -devel repos and ONLY for misp-modules, ignore if not needed
|
||||
sudo subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms
|
||||
# Software Collections is available for Red Hat Enterprise Linux 7 and previous supported releases. Starting with Red Hat Enterprise Linux 8, the content traditionally consumed via Software Collections is now part of Application Streams. Please see the Application Streams Life Cycle documentation for that release. Source: https://access.redhat.com/support/policy/updates/rhscl
|
||||
enableOptionalRHEL8 () {
|
||||
sudo subscription-manager refresh
|
||||
|
||||
# The following is needed for -devel repos and ONLY for misp-modules, ignore if not needed
|
||||
sudo subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms
|
||||
# Software Collections is available for Red Hat Enterprise Linux 7 and previous supported releases. Starting with Red Hat Enterprise Linux 8, the content traditionally consumed via Software Collections is now part of Application Streams. Please see the Application Streams Life Cycle documentation for that release. Source: https://access.redhat.com/support/policy/updates/rhscl
|
||||
}
|
||||
# <snippet-end 0_RHEL_SCL.sh>
|
||||
```
|
||||
|
||||
## 1.5a/ Install the deltarpm package to help reduce download size when installing updates (optional)
|
||||
```bash
|
||||
sudo yum install drpm -y
|
||||
sudo dnf install drpm -y
|
||||
```
|
||||
|
||||
## 1.5/ Update the system and reboot
|
||||
```bash
|
||||
# <snippet-begin 0_yum-update.sh>
|
||||
yumUpdate () {
|
||||
sudo yum update -y
|
||||
sudo dnf update -y
|
||||
}
|
||||
# <snippet-end 0_yum-update.sh>
|
||||
```
|
||||
|
|
@ -114,13 +122,19 @@ yumUpdate () {
|
|||
## 1.6/ Install the EPEL and remi repo
|
||||
```bash
|
||||
# <snippet-begin 0_EPEL_REMI.sh>
|
||||
enableEPEL_REMI () {
|
||||
sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y
|
||||
sudo yum install http://rpms.remirepo.net/enterprise/remi-release-8.rpm -y
|
||||
sudo yum install yum-utils -y
|
||||
enableEPEL_REMI_8 () {
|
||||
sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y
|
||||
sudo dnf install http://rpms.remirepo.net/enterprise/remi-release-8.rpm -y
|
||||
sudo dnf install dnf-utils -y
|
||||
sudo dnf module enable php:remi-7.4 -y
|
||||
[[ ${DISTRI} == "centos8stream" ]] && sudo dnf config-manager --set-enabled powertools
|
||||
[[ ${DISTRI} == "centos8" ]] && sudo dnf config-manager --set-enabled powertools
|
||||
}
|
||||
|
||||
enableREMI_f33 () {
|
||||
sudo dnf install http://rpms.remirepo.net/fedora/remi-release-33.rpm
|
||||
sudo dnf install dnf-utils -y
|
||||
sudo dnf module enable php:remi-7.4 -y
|
||||
[[ ${DISTRI} == "centos8stream" ]] &&sudo dnf config-manager --set-enabled powertools
|
||||
[[ ${DISTRI} == "centos8" ]] &&sudo dnf config-manager --set-enabled powertools
|
||||
}
|
||||
# <snippet-end 0_EPEL_REMI.sh>
|
||||
```
|
||||
|
|
@ -140,8 +154,8 @@ yumInstallCoreDeps () {
|
|||
# Install the dependencies:
|
||||
PHP_BASE="/etc/"
|
||||
PHP_INI="/etc/php.ini"
|
||||
sudo yum install @httpd -y
|
||||
sudo yum install gcc git zip \
|
||||
sudo dnf install @httpd -y
|
||||
sudo dnf install gcc git zip \
|
||||
httpd \
|
||||
mod_ssl \
|
||||
redis \
|
||||
|
|
@ -157,7 +171,7 @@ yumInstallCoreDeps () {
|
|||
sudo systemctl enable --now redis.service
|
||||
|
||||
# Install PHP 7.4 from Remi's repo, see https://rpms.remirepo.net/enterprise/8/php74/x86_64/repoview/
|
||||
sudo yum install php php-fpm php-devel \
|
||||
sudo dnf install php php-fpm php-devel \
|
||||
php-mysqlnd \
|
||||
php-mbstring \
|
||||
php-xml \
|
||||
|
|
@ -177,10 +191,12 @@ yumInstallCoreDeps () {
|
|||
|
||||
```bash
|
||||
# <snippet-begin 0_yumInstallHaveged.sh>
|
||||
# GPG needs lots of entropy, haveged provides entropy
|
||||
# /!\ Only do this if you're not running rngd to provide randomness and your kernel randomness is not sufficient.
|
||||
sudo yum install haveged -y
|
||||
sudo systemctl enable --now haveged.service
|
||||
installEntropyRHEL () {
|
||||
# GPG needs lots of entropy, haveged provides entropy
|
||||
# /!\ Only do this if you're not running rngd to provide randomness and your kernel randomness is not sufficient.
|
||||
sudo dnf install haveged -y
|
||||
sudo systemctl enable --now haveged.service
|
||||
}
|
||||
# <snippet-end 0_yumInstallHaveged.sh>
|
||||
```
|
||||
|
||||
|
|
@ -193,88 +209,27 @@ sudo systemctl enable --now haveged.service
|
|||
sudo systemctl enable --now php-fpm.service
|
||||
```
|
||||
|
||||
TODO: Add a CentOS/RHEL rng thing, à la haveged (not in base anymore) or similar.
|
||||
|
||||
### 3/ MISP code
|
||||
## 3.01/ Download MISP code using git in /var/www/ directory
|
||||
|
||||
```bash
|
||||
# <snippet-begin 1_mispCoreInstall_RHEL.sh>
|
||||
installCoreRHEL () {
|
||||
# Download MISP using git in the $PATH_TO_MISP directory.
|
||||
sudo mkdir -p $(dirname $PATH_TO_MISP)
|
||||
sudo chown $WWW_USER:$WWW_USER $(dirname $PATH_TO_MISP)
|
||||
cd $(dirname $PATH_TO_MISP)
|
||||
$SUDO_WWW git clone https://github.com/MISP/MISP.git
|
||||
cd $PATH_TO_MISP
|
||||
|
||||
# Fetch submodules
|
||||
$SUDO_WWW git submodule update --init --recursive
|
||||
# Make git ignore filesystem permission differences for submodules
|
||||
$SUDO_WWW git submodule foreach --recursive git config core.filemode false
|
||||
# Make git ignore filesystem permission differences
|
||||
$SUDO_WWW git config core.filemode false
|
||||
|
||||
# Create a python3 virtualenv
|
||||
$SUDO_WWW virtualenv-3 -p python3 $PATH_TO_MISP/venv
|
||||
sudo mkdir /usr/share/httpd/.cache
|
||||
sudo chown $WWW_USER:$WWW_USER /usr/share/httpd/.cache
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U pip setuptools
|
||||
|
||||
compileLiefRHEL8 () {
|
||||
cd $PATH_TO_MISP/app/files/scripts
|
||||
$SUDO_WWW git clone https://github.com/CybOXProject/python-cybox.git
|
||||
$SUDO_WWW git clone https://github.com/STIXProject/python-stix.git
|
||||
$SUDO_WWW git clone --branch master --single-branch https://github.com/lief-project/LIEF.git lief
|
||||
$SUDO_WWW git clone https://github.com/CybOXProject/mixbox.git
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-cybox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
# If you umask is has been changed from the default, it is a good idea to reset it to 0022 before installing python modules
|
||||
UMASK=$(umask)
|
||||
umask 0022
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-cybox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-stix
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install mixbox to accommodate the new STIX dependencies:
|
||||
cd $PATH_TO_MISP/app/files/scripts/mixbox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install STIX2.0 library to support STIX 2.0 export:
|
||||
cd $PATH_TO_MISP/cti-python-stix2
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install maec
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U maec
|
||||
|
||||
# install zmq
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U zmq
|
||||
|
||||
# install redis
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U redis
|
||||
|
||||
# lief needs manual compilation
|
||||
sudo yum groupinstall "Development Tools" -y
|
||||
[[ ${DISTRI} == 'rhel8.3' ]] && sudo yum install cmake3 -y && CMAKE_BIN='cmake3'
|
||||
[[ ${DISTRI} == 'centos8stream' ]] && sudo yum install cmake -y && CMAKE_BIN='cmake'
|
||||
[[ ${DISTRI} == 'centos8' ]] && sudo yum install cmake -y && CMAKE_BIN='cmake'
|
||||
# lief might need manual compilation
|
||||
sudo dnf groupinstall "Development Tools" -y
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/lief
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW mkdir build
|
||||
cd build
|
||||
$SUDO_WWW ${CMAKE_BIN} \
|
||||
-DLIEF_PYTHON_API=on \
|
||||
-DPYTHON_VERSION=3.6 \
|
||||
-DPYTHON_EXECUTABLE=$PATH_TO_MISP/venv/bin/python \
|
||||
-DLIEF_DOC=off \
|
||||
-DCMAKE_BUILD_TYPE=Release \
|
||||
-DLIEF_PYTHON_API=on \
|
||||
-DPYTHON_VERSION=3.6 \
|
||||
-DPYTHON_EXECUTABLE=$PATH_TO_MISP/venv/bin/python \
|
||||
-DLIEF_DOC=off \
|
||||
-DCMAKE_BUILD_TYPE=Release \
|
||||
..
|
||||
$SUDO_WWW make -j3 pyLIEF
|
||||
|
||||
|
|
@ -295,10 +250,72 @@ installCoreRHEL () {
|
|||
|
||||
# The following adds a PYTHONPATH to where the pyLIEF module has been compiled
|
||||
echo /var/www/MISP/app/files/scripts/lief/build/api/python |$SUDO_WWW tee /var/www/MISP/venv/lib/python3.6/site-packages/lief.pth
|
||||
[[ "${DISTRI}" == "fedora33" ]] && (echo /var/www/MISP/app/files/scripts/lief/build/api/python |$SUDO_WWW tee /var/www/MISP/venv/lib/python3.9/site-packages/lief.pth)
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U python-magic plyara
|
||||
}
|
||||
|
||||
installCoreRHEL8 () {
|
||||
# Download MISP using git in the $PATH_TO_MISP directory.
|
||||
sudo mkdir -p $(dirname $PATH_TO_MISP)
|
||||
sudo chown $WWW_USER:$WWW_USER $(dirname $PATH_TO_MISP)
|
||||
cd $(dirname $PATH_TO_MISP)
|
||||
$SUDO_WWW git clone https://github.com/MISP/MISP.git
|
||||
cd $PATH_TO_MISP
|
||||
|
||||
# Fetch submodules
|
||||
$SUDO_WWW git submodule update --init --recursive
|
||||
# Make git ignore filesystem permission differences for submodules
|
||||
$SUDO_WWW git submodule foreach --recursive git config core.filemode false
|
||||
# Make git ignore filesystem permission differences
|
||||
$SUDO_WWW git config core.filemode false
|
||||
|
||||
# Create a python3 virtualenv
|
||||
[[ -e $(which virtualenv-3 2>/dev/null) ]] && $SUDO_WWW virtualenv-3 -p python3 $PATH_TO_MISP/venv
|
||||
[[ -e $(which virtualenv 2>/dev/null) ]] && $SUDO_WWW virtualenv -p python3 $PATH_TO_MISP/venv
|
||||
sudo mkdir /usr/share/httpd/.cache
|
||||
sudo chown $WWW_USER:$WWW_USER /usr/share/httpd/.cache
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U pip setuptools
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts
|
||||
$SUDO_WWW git clone https://github.com/CybOXProject/python-cybox.git
|
||||
$SUDO_WWW git clone https://github.com/STIXProject/python-stix.git
|
||||
$SUDO_WWW git clone https://github.com/CybOXProject/mixbox.git
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-cybox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
# If you umask is has been changed from the default, it is a good idea to reset it to 0022 before installing python modules
|
||||
([[ ${DISTRI} == 'fedora33' ]] || [[ ${DISTRI} == 'rhel8.3' ]]) && sudo dnf install cmake3 -y && CMAKE_BIN='cmake3'
|
||||
[[ ${DISTRI} == 'centos8stream' ]] && sudo dnf install cmake -y && CMAKE_BIN='cmake'
|
||||
[[ ${DISTRI} == 'centos8' ]] && sudo dnf install cmake -y && CMAKE_BIN='cmake'
|
||||
|
||||
UMASK=$(umask)
|
||||
umask 0022
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-cybox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
cd $PATH_TO_MISP/app/files/scripts/python-stix
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install mixbox to accommodate the new STIX dependencies:
|
||||
cd $PATH_TO_MISP/app/files/scripts/mixbox
|
||||
$SUDO_WWW git config core.filemode false
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install STIX2.0 library to support STIX 2.0 export:
|
||||
cd $PATH_TO_MISP/cti-python-stix2
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install .
|
||||
|
||||
# install maec, zmq, redis
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U maec zmq redis
|
||||
|
||||
# install magic, pydeep
|
||||
##$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U python-magic git+https://github.com/kbandla/pydeep.git plyara
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U python-magic plyara
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U python-magic git+https://github.com/kbandla/pydeep.git plyara
|
||||
|
||||
# install lief
|
||||
$SUDO_WWW $PATH_TO_MISP/venv/bin/pip install -U lief || compileLiefRHEL8
|
||||
|
||||
# install PyMISP
|
||||
cd $PATH_TO_MISP/PyMISP
|
||||
|
|
@ -306,7 +323,7 @@ installCoreRHEL () {
|
|||
|
||||
# FIXME: Remove libfaup etc once the egg has the library baked-in
|
||||
# BROKEN: This needs to be tested on RHEL/CentOS
|
||||
sudo yum install libcaca-devel -y
|
||||
sudo dnf install libcaca-devel -y
|
||||
cd /tmp
|
||||
[[ ! -d "faup" ]] && $SUDO_CMD git clone https://github.com/stricaud/faup.git faup
|
||||
[[ ! -d "gtcaca" ]] && $SUDO_CMD git clone https://github.com/stricaud/gtcaca.git gtcaca
|
||||
|
|
@ -326,12 +343,12 @@ installCoreRHEL () {
|
|||
# Enable dependencies detection in the diagnostics page
|
||||
# This allows MISP to detect GnuPG, the Python modules' versions and to read the PHP settings.
|
||||
echo "env[PATH] = /usr/local/bin:/usr/bin:/bin" |sudo tee -a ${PHP_BASE}/php-fpm.d/www.conf
|
||||
sudo sed -i.org -e 's/^;\(clear_env = no\)/\1/' ${PHP_BASE}/php-fpm.d/www.conf # TODO check if below is different on RHEL8 php74-php-fpm.service also dbl check paths
|
||||
sudo sed -i.org -e 's/^;\(clear_env = no\)/\1/' ${PHP_BASE}/php-fpm.d/www.conf
|
||||
sudo sed -i.org -e 's/^\(listen =\) \/run\/php-fpm\/www\.sock/\1 127.0.0.1:9000/' ${PHP_BASE}/php-fpm.d/www.conf
|
||||
|
||||
sudo systemctl restart php-fpm.service
|
||||
|
||||
umask $UMASK
|
||||
|
||||
sudo systemctl restart php-fpm.service
|
||||
}
|
||||
# <snippet-end 1_mispCoreInstall_RHEL.sh>
|
||||
```
|
||||
|
|
@ -344,7 +361,7 @@ installCoreRHEL () {
|
|||
|
||||
```bash
|
||||
# <snippet-begin 1_installCake_RHEL.sh>
|
||||
installCake_RHEL ()
|
||||
installCake_RHEL8 ()
|
||||
{
|
||||
sudo chown -R $WWW_USER:$WWW_USER $PATH_TO_MISP
|
||||
sudo mkdir /usr/share/httpd/.composer
|
||||
|
|
@ -357,7 +374,7 @@ installCake_RHEL ()
|
|||
#$SUDO_WWW php -r "unlink('composer-setup.php');"
|
||||
$SUDO_WWW php composer.phar install
|
||||
|
||||
sudo yum install php-pecl-redis php-pecl-ssdeep php-pecl-gnupg -y
|
||||
sudo dnf install php-pecl-redis php-pecl-ssdeep php-pecl-gnupg -y
|
||||
|
||||
sudo systemctl restart php-fpm.service
|
||||
|
||||
|
|
@ -388,7 +405,7 @@ installCake_RHEL ()
|
|||
```bash
|
||||
# <snippet-begin 2_permissions_RHEL.sh>
|
||||
# Main function to fix permissions to something sane
|
||||
permissions_RHEL () {
|
||||
permissions_RHEL8 () {
|
||||
sudo chown -R $WWW_USER:$WWW_USER $PATH_TO_MISP
|
||||
## ? chown -R root:$WWW_USER $PATH_TO_MISP
|
||||
sudo find $PATH_TO_MISP -type d -exec chmod g=rx {} \;
|
||||
|
|
@ -417,7 +434,7 @@ permissions_RHEL () {
|
|||
## 6.01/ Set database to listen on localhost only
|
||||
```bash
|
||||
# <snippet-begin 1_prepareDB_RHEL.sh>
|
||||
prepareDB_RHEL () {
|
||||
prepareDB_RHEL8 () {
|
||||
# Enable, start and secure your mysql database server
|
||||
sudo systemctl enable --now mariadb.service
|
||||
echo [mysqld] |sudo tee /etc/my.cnf.d/bind-address.cnf
|
||||
|
|
@ -460,7 +477,7 @@ prepareDB_RHEL () {
|
|||
|
||||
```bash
|
||||
# <snippet-begin 1_apacheConfig_RHEL.sh>
|
||||
apacheConfig_RHEL () {
|
||||
apacheConfig_RHEL8 () {
|
||||
# Now configure your apache server with the DocumentRoot $PATH_TO_MISP/app/webroot/
|
||||
# A sample vhost can be found in $PATH_TO_MISP/INSTALL/apache.misp.centos7
|
||||
|
||||
|
|
@ -495,7 +512,7 @@ apacheConfig_RHEL () {
|
|||
sudo sh -c "chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/Console/worker/*.sh"
|
||||
sudo sh -c "chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/files/scripts/*.py"
|
||||
sudo sh -c "chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/files/scripts/*/*.py"
|
||||
sudo chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/files/scripts/lief/build/api/python/lief.so
|
||||
[[ -e ${PATH_TO_MISP}/app/files/scripts/lief/build/api/python/lief.so ]] && sudo chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/files/scripts/lief/build/api/python/lief.so
|
||||
sudo chcon -t httpd_sys_script_exec_t $PATH_TO_MISP/app/Vendor/pear/crypt_gpg/scripts/crypt-gpg-pinentry
|
||||
sudo sh -c "chcon -R -t bin_t $PATH_TO_MISP/venv/bin/*"
|
||||
sudo find $PATH_TO_MISP/venv -type f -name "*.so*" -or -name "*.so.*" | xargs sudo chcon -t lib_t
|
||||
|
|
@ -692,12 +709,16 @@ configWorkersRHEL () {
|
|||
# <snippet-end 3_configWorkers_RHEL.sh>
|
||||
```
|
||||
|
||||
{!generic/misp-modules-centos.md!}
|
||||
|
||||
{!generic/MISP_CAKE_init.md!}
|
||||
|
||||
{!generic/misp-modules-centos.md!}
|
||||
|
||||
{!generic/misp-modules-cake.md!}
|
||||
|
||||
{!generic/misp-dashboard-centos.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/INSTALL.done.md!}
|
||||
|
||||
{!generic/recommended.actions.md!}
|
||||
|
|
|
|||
|
|
@ -1,11 +1,11 @@
|
|||
# INSTALLATION INSTRUCTIONS
|
||||
## for Ubuntu 18.04.4-server
|
||||
## for Ubuntu 18.04.5-server
|
||||
|
||||
### -1/ Installer and Manual install instructions
|
||||
|
||||
Make sure you are reading the parsed version of this Document. When in doubt [click here](https://misp.github.io/MISP/INSTALL.ubuntu1804/).
|
||||
|
||||
To install MISP on a fresh Ubuntu 18.04, all you need to do is the following:
|
||||
To install MISP on a *fresh* Ubuntu 18.04, all you need to do is the following:
|
||||
|
||||
```bash
|
||||
# Please check the installer options first to make the best choice for your install
|
||||
|
|
@ -20,12 +20,9 @@ bash /tmp/INSTALL.sh -c
|
|||
### 0/ MISP Ubuntu 18.04-server install - status
|
||||
-------------------------
|
||||
!!! notice
|
||||
Installer tested working by [@SteveClement](https://twitter.com/SteveClement) on 20210324 (works with **Ubuntu 18.10/19.04** too)
|
||||
Installer tested working by [@SteveClement](https://twitter.com/SteveClement) on 20210324 (works with **Ubuntu 19.04/20.04/21.04** too)
|
||||
|
||||
!!! notice
|
||||
This document also serves as a source for the [INSTALL-misp.sh](https://github.com/MISP/MISP/blob/2.4/INSTALL/INSTALL.sh) script.
|
||||
Which explains why you will see the use of shell *functions* in various steps.
|
||||
Henceforth the document will also follow a more logical flow. In the sense that all the dependencies are installed first then config files are generated, etc...
|
||||
{!generic/manual-install-notes.md!}
|
||||
|
||||
!!! notice
|
||||
If the next line is `[!generic/core.md!]()` [click here](https://misp.github.io/MISP/INSTALL.ubuntu1804/).
|
||||
|
|
@ -37,7 +34,7 @@ bash /tmp/INSTALL.sh -c
|
|||
|
||||
#### Install a minimal Ubuntu 18.04-server system with the software:
|
||||
- OpenSSH server
|
||||
- This guide assumes a user name of 'misp' with sudo working
|
||||
- This guide assumes a user name of 'misp' with sudo working but can be overwritten by setting the environment variable: *${MISP_USER}*
|
||||
|
||||
#### Make sure your system is up2date
|
||||
```bash
|
||||
|
|
@ -507,6 +504,8 @@ echo "User (misp) DB Password: $DBPASSWORD_MISP"
|
|||
|
||||
{!generic/misp-modules-debian.md!}
|
||||
|
||||
{!generic/misp-modules-cake.md!}
|
||||
|
||||
{!generic/INSTALL.done.md!}
|
||||
|
||||
{!generic/recommended.actions.md!}
|
||||
|
|
@ -534,6 +533,8 @@ installKafka () {
|
|||
|
||||
{!generic/misp-dashboard-debian.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/viper-debian.md!}
|
||||
|
||||
{!generic/ssdeep-debian.md!}
|
||||
|
|
|
|||
|
|
@ -1,11 +1,11 @@
|
|||
# INSTALLATION INSTRUCTIONS
|
||||
## for Ubuntu 20.04-server
|
||||
## for Ubuntu 20.04.2.0-server
|
||||
|
||||
### -1/ Installer and Manual install instructions
|
||||
|
||||
Make sure you are reading the parsed version of this Document. When in doubt [click here](https://misp.github.io/MISP/INSTALL.ubuntu1804/).
|
||||
Make sure you are reading the parsed version of this Document. When in doubt [click here](https://misp.github.io/MISP/INSTALL.ubuntu2004/).
|
||||
|
||||
To install MISP on a fresh Ubuntu 20.04, all you need to do is the following:
|
||||
To install MISP on a *fresh* Ubuntu 20.04, all you need to do is the following:
|
||||
|
||||
```bash
|
||||
# Please check the installer options first to make the best choice for your install
|
||||
|
|
@ -20,12 +20,9 @@ bash /tmp/INSTALL.sh -c
|
|||
### 0/ MISP Ubuntu 20.04-server install - status
|
||||
-------------------------
|
||||
!!! notice
|
||||
Installer tested working by [@SteveClement](https://twitter.com/SteveClement) on 20200501
|
||||
Installer tested working by [@SteveClement](https://twitter.com/SteveClement) on 20210331
|
||||
|
||||
!!! notice
|
||||
This document also serves as a source for the [INSTALL-misp.sh](https://github.com/MISP/MISP/blob/2.4/INSTALL/INSTALL.sh) script.
|
||||
Which explains why you will see the use of shell *functions* in various steps.
|
||||
Henceforth the document will also follow a more logical flow. In the sense that all the dependencies are installed first then config files are generated, etc...
|
||||
{!generic/manual-install-notes.md!}
|
||||
|
||||
!!! notice
|
||||
If the next line is `[!generic/core.md!]()` [click here](https://misp.github.io/MISP/INSTALL.ubuntu2004/).
|
||||
|
|
@ -37,7 +34,7 @@ bash /tmp/INSTALL.sh -c
|
|||
|
||||
#### Install a minimal Ubuntu 20.04-server system with the software:
|
||||
- OpenSSH server
|
||||
- This guide assumes a user name of 'misp' with sudo working
|
||||
- This guide assumes a user name of 'misp' with sudo working but can be overwritten by setting the environment variable: *${MISP_USER}*
|
||||
|
||||
#### Make sure your system is up2date
|
||||
```bash
|
||||
|
|
@ -507,6 +504,8 @@ echo "User (misp) DB Password: $DBPASSWORD_MISP"
|
|||
|
||||
{!generic/misp-modules-debian.md!}
|
||||
|
||||
{!generic/misp-modules-cake.md!}
|
||||
|
||||
{!generic/INSTALL.done.md!}
|
||||
|
||||
{!generic/recommended.actions.md!}
|
||||
|
|
@ -534,6 +533,8 @@ installKafka () {
|
|||
|
||||
{!generic/misp-dashboard-debian.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/viper-debian.md!}
|
||||
|
||||
{!generic/ssdeep-debian.md!}
|
||||
|
|
|
|||
|
|
@ -27,13 +27,13 @@ coreCAKE () {
|
|||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Session.cookieTimeout" 3600
|
||||
|
||||
# Change base url, either with this CLI command or in the UI
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Baseurl $MISP_BASEURL
|
||||
[[ ! -z ${MISP_BASEURL} ]] && $SUDO_WWW $RUN_PHP -- $CAKE Baseurl $MISP_BASEURL
|
||||
# example: 'baseurl' => 'https://<your.FQDN.here>',
|
||||
# alternatively, you can leave this field empty if you would like to use relative pathing in MISP
|
||||
# 'baseurl' => '',
|
||||
# The base url of the application (in the format https://www.mymispinstance.com) as visible externally/by other MISPs.
|
||||
# MISP will encode this URL in sharing groups when including itself. If this value is not set, the baseurl is used as a fallback.
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.external_baseurl" $MISP_BASEURL
|
||||
[[ ! -z ${MISP_BASEURL} ]] && $SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.external_baseurl" $MISP_BASEURL
|
||||
|
||||
# Enable GnuPG
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "GnuPG.email" "$GPG_EMAIL_ADDRESS"
|
||||
|
|
@ -69,8 +69,54 @@ coreCAKE () {
|
|||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.Sightings_range" 365
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.Sightings_sighting_db_enable" false
|
||||
|
||||
# Plugin Enrichment hover defaults
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.Enrichment_hover_popover_only" false
|
||||
# Set API_Required modules to false
|
||||
for PLUG in $(echo "Plugin.Enrichment_cuckoo_submit_enabled
|
||||
Plugin.Enrichment_vmray_submit_enabled
|
||||
Plugin.Enrichment_circl_passivedns_enabled
|
||||
Plugin.Enrichment_circl_passivessl_enabled
|
||||
Plugin.Enrichment_domaintools_enabled
|
||||
Plugin.Enrichment_eupi_enabled
|
||||
Plugin.Enrichment_farsight_passivedns_enabled
|
||||
Plugin.Enrichment_passivetotal_enabled
|
||||
Plugin.Enrichment_passivetotal_enabled
|
||||
Plugin.Enrichment_virustotal_enabled
|
||||
Plugin.Enrichment_whois_enabled
|
||||
Plugin.Enrichment_shodan_enabled
|
||||
Plugin.Enrichment_geoip_asn_enabled
|
||||
Plugin.Enrichment_geoip_city_enabled
|
||||
Plugin.Enrichment_geoip_country_enabled
|
||||
Plugin.Enrichment_iprep_enabled
|
||||
Plugin.Enrichment_otx_enabled
|
||||
Plugin.Enrichment_vulndb_enabled
|
||||
Plugin.Enrichment_crowdstrike_falcon_enabled
|
||||
Plugin.Enrichment_onyphe_enabled
|
||||
Plugin.Enrichment_xforceexchange_enabled
|
||||
Plugin.Enrichment_vulners_enabled
|
||||
Plugin.Enrichment_macaddress_io_enabled
|
||||
Plugin.Enrichment_intel471_enabled
|
||||
Plugin.Enrichment_backscatter_io_enabled
|
||||
Plugin.Enrichment_hibp_enabled
|
||||
Plugin.Enrichment_greynoise_enabled
|
||||
Plugin.Enrichment_joesandbox_submit_enabled
|
||||
Plugin.Enrichment_virustotal_public_enabled
|
||||
Plugin.Enrichment_apiosintds_enabled
|
||||
Plugin.Enrichment_urlscan_enabled
|
||||
Plugin.Enrichment_securitytrails_enabled
|
||||
Plugin.Enrichment_apivoid_enabled
|
||||
Plugin.Enrichment_assemblyline_submit_enabled
|
||||
Plugin.Enrichment_assemblyline_query_enabled
|
||||
Plugin.Enrichment_ransomcoindb_enabled
|
||||
Plugin.Enrichment_lastline_query_enabled
|
||||
Plugin.Enrichment_sophoslabs_intelix_enabled
|
||||
Plugin.Enrichment_cytomic_orion_enabled
|
||||
Plugin.Enrichment_censys_enrich_enabled
|
||||
Plugin.Enrichment_trustar_enrich_enabled
|
||||
Plugin.Enrichment_recordedfuture_enabled
|
||||
Plugin.ElasticSearch_logging_enable
|
||||
Plugin.S3_enable"); do
|
||||
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting ${PLUG} false
|
||||
done
|
||||
|
||||
# Plugin CustomAuth tuneable
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.CustomAuth_disable_logout" false
|
||||
|
|
@ -88,6 +134,52 @@ coreCAKE () {
|
|||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.RPZ_ns_alt" ""
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.RPZ_email" "root.localhost"
|
||||
|
||||
# Kafka settings
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_brokers" "kafka:9092"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_rdkafka_config" "/etc/rdkafka.ini"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_include_attachments" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_event_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_event_notifications_topic" "misp_event"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_event_publish_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_event_publish_notifications_topic" "misp_event_publish"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_object_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_object_notifications_topic" "misp_object"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_object_reference_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_object_reference_notifications_topic" "misp_object_reference"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_attribute_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_attribute_notifications_topic" "misp_attribute"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_shadow_attribute_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_shadow_attribute_notifications_topic" "misp_shadow_attribute"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_tag_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_tag_notifications_topic" "misp_tag"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_sighting_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_sighting_notifications_topic" "misp_sighting"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_user_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_user_notifications_topic" "misp_user"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_organisation_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_organisation_notifications_topic" "misp_organisation"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_audit_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Kafka_audit_notifications_topic" "misp_audit"
|
||||
|
||||
# ZeroMQ settings
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_host" "127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_port" 50000
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_host" "localhost"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_port" 6379
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_database" 1
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_namespace" "mispq"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_event_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_object_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_object_reference_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_attribute_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_sighting_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_user_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_organisation_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_include_attachments" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_tag_notifications_enable" false
|
||||
|
||||
# Force defaults to make MISP Server Settings less RED
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.language" "eng"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.proposals_block_attributes" false
|
||||
|
|
@ -128,6 +220,7 @@ coreCAKE () {
|
|||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.welcome_text_bottom" "Welcome to MISP on $FLAVOUR, change this message in MISP Settings"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.attachments_dir" "$PATH_TO_MISP/app/files"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.download_attachments_on_load" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.event_alert_metadata_only" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.title_text" "MISP"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.terms_download" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "MISP.showorgalternate" false
|
||||
|
|
@ -136,6 +229,7 @@ coreCAKE () {
|
|||
# Force defaults to make MISP Server Settings less GREEN
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "debug" 0
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Security.auth_enforced" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Security.log_each_individual_auth_fail" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Security.rest_client_baseurl" ""
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Security.advanced_authkeys" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Security.password_policy_length" 12
|
||||
|
|
|
|||
|
|
@ -0,0 +1,3 @@
|
|||
!!! notice
|
||||
This document also serves as a source for the [INSTALL-misp.sh](https://github.com/MISP/MISP/blob/2.4/INSTALL/INSTALL.sh) script.
|
||||
You will see bash-*functions* in various steps. You can either copy between the *{}*'s or copy the entire function and just run it.
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
```bash
|
||||
# <snippet-begin 4_misp-dashboard-cake.sh>
|
||||
dashboardCAKE () {
|
||||
# Enable ZeroMQ for misp-dashboard
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_host" "127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_port" 50000
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_host" "localhost"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_port" 6379
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_database" 1
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_redis_namespace" "mispq"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_include_attachments" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_event_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_object_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_object_reference_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_attribute_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_tag_notifications_enable" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_sighting_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_user_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_organisation_notifications_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.ZeroMQ_audit_notifications_enable" false
|
||||
}
|
||||
# <snippet-end 4_misp-dashboard-cake.sh>
|
||||
```
|
||||
|
|
@ -2,10 +2,10 @@
|
|||
--------------
|
||||
|
||||
!!! warning
|
||||
Currently defunct due to upstream dependency changes
|
||||
A valid MaxMind DB key is required.
|
||||
|
||||
!!! warning
|
||||
Does not work on RHEL 8
|
||||
Does not work fully on RHEL 8
|
||||
|
||||
```bash
|
||||
# <snippet-begin 4_misp-dashboardRHEL.sh>
|
||||
|
|
@ -17,13 +17,14 @@ mispDashboard () {
|
|||
false; while [[ $? -ne 0 ]]; do $SUDO_WWW git clone https://github.com/MISP/misp-dashboard.git /var/www/misp-dashboard; done
|
||||
cd /var/www/misp-dashboard
|
||||
sudo sed -i -E 's/sudo apt/#sudo apt/' install_dependencies.sh
|
||||
sudo sed -i -E 's/virtualenv -p python3 DASHENV/\/usr\/bin\/scl enable rh-python36 \"virtualenv -p python3 DASHENV\"/' install_dependencies.sh
|
||||
sudo -H /var/www/misp-dashboard/install_dependencies.sh
|
||||
sudo sed -i "s/^host\ =\ localhost/host\ =\ 0.0.0.0/g" /var/www/misp-dashboard/config/config.cfg
|
||||
sudo sed -i '/Listen 80/a Listen 0.0.0.0:8001' /etc/httpd/conf/httpd.conf
|
||||
sudo yum install rh-python36-mod_wsgi -y
|
||||
sudo cp /opt/rh/httpd24/root/usr/lib64/httpd/modules/mod_rh-python36-wsgi.so /etc/httpd/modules/
|
||||
sudo cp /opt/rh/httpd24/root/etc/httpd/conf.modules.d/10-rh-python36-wsgi.conf /etc/httpd/conf.modules.d/
|
||||
# TODO: Check if this works on 7.x
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo yum install rh-python36-mod_wsgi -y
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo cp /opt/rh/httpd24/root/usr/lib64/httpd/modules/mod_rh-python36-wsgi.so /etc/httpd/modules/
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo cp /opt/rh/httpd24/root/etc/httpd/conf.modules.d/10-rh-python36-wsgi.conf /etc/httpd/conf.modules.d/
|
||||
([[ "${DISTRI}" == "fedora33" ]] || [[ "${DIST_VER}" =~ ^[8].* ]]) && sudo yum install python3-mod_wsgi -y
|
||||
|
||||
echo "<VirtualHost *:8001>
|
||||
ServerAdmin admin@misp.local
|
||||
|
|
@ -68,24 +69,6 @@ mispDashboard () {
|
|||
|
||||
# Add misp-dashboard to rc.local to start on boot.
|
||||
sudo sed -i -e '$i \sudo -u apache bash /var/www/misp-dashboard/start_all.sh > /tmp/misp-dashboard_rc.local.log\n' /etc/rc.local
|
||||
|
||||
# Enable ZeroMQ for misp-dashboard
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_event_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_object_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_object_reference_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_attribute_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_sighting_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_user_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_organisation_notifications_enable" true
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_port" 50000
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_redis_host" "localhost"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_redis_port" 6379
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_redis_database" 1
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_redis_namespace" "mispq"
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_include_attachments" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_tag_notifications_enable" false
|
||||
$SUDO_WWW $RUN_PHP -- $CAKE Admin setSetting "Plugin.ZeroMQ_audit_notifications_enable" false
|
||||
}
|
||||
# <snippet-end 4_misp-dashboardRHEL.sh>
|
||||
```
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
--------------
|
||||
|
||||
!!! warning
|
||||
Currently defunct due to upstream dependency changes
|
||||
A valid MaxMind DB key is required.
|
||||
|
||||
```bash
|
||||
# <snippet-begin 4_misp-dashboard.sh>
|
||||
|
|
@ -75,26 +75,3 @@ mispDashboard () {
|
|||
sudo sed -i -e '$i \sudo -u www-data bash /var/www/misp-dashboard/start_all.sh > /tmp/misp-dashboard_rc.local.log\n' /etc/rc.local
|
||||
}
|
||||
# <snippet-end 4_misp-dashboard.sh>
|
||||
|
||||
# <snippet-begin 4_misp-dashboard-cake.sh>
|
||||
dashboardCAKE () {
|
||||
# Enable ZeroMQ for misp-dashboard
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_event_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_object_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_object_reference_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_attribute_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_sighting_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_user_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_organisation_notifications_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_port" 50000
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_redis_host" "localhost"
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_redis_port" 6379
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_redis_database" 1
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_redis_namespace" "mispq"
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_include_attachments" false
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_tag_notifications_enable" false
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.ZeroMQ_audit_notifications_enable" false
|
||||
}
|
||||
# <snippet-end 4_misp-dashboard-cake.sh>
|
||||
```
|
||||
|
|
|
|||
|
|
@ -0,0 +1,67 @@
|
|||
```bash
|
||||
# <snippet-begin 3_misp-modules-cake.sh>
|
||||
modulesCAKE () {
|
||||
# Enable Enrichment, set better timeouts
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hover_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hover_popover_only" false
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hover_timeout" 150
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_bgpranking_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_countrycode_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_cve_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_cve_advanced_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_cpe_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_dns_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_eql_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_btc_steroids_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_ipasn_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_reversedns_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_yara_syntax_validator_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_yara_query_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_wiki_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_threatminer_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_threatcrowd_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hashdd_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_rbl_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_sigma_syntax_validator_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_stix2_pattern_syntax_validator_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_sigma_queries_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_dbl_spamhaus_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_btc_scam_check_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_macvendors_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_qrcode_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_ocr_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_pdf_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_docx_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_xlsx_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_pptx_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_ods_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_odt_enrich_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_urlhaus_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_malwarebazaar_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_html_to_markdown_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_socialscan_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_port" 6666
|
||||
|
||||
# Enable Import modules, set better timeout
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_port" 6666
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_ocr_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_mispjson_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_openiocimport_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_threatanalyzer_import_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_csvimport_enabled" true
|
||||
|
||||
# Enable Export modules, set better timeout
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_port" 6666
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_pdfexport_enabled" true
|
||||
}
|
||||
# <snippet-end 3_misp-modules-cake.sh>
|
||||
```
|
||||
|
|
@ -4,10 +4,10 @@
|
|||
# <snippet-begin 3_misp-modules_RHEL.sh>
|
||||
mispmodulesRHEL () {
|
||||
# some misp-modules dependencies for RHEL<8
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo yum install openjpeg-devel gcc-c++ poppler-cpp-devel pkgconfig python-devel redhat-rpm-config -y
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo yum install openjpeg-devel gcc-c++ poppler-cpp-devel pkgconfig python3-devel redhat-rpm-config -y
|
||||
|
||||
# some misp-modules dependencies for RHEL8
|
||||
[[ "${DIST_VER}" =~ ^[8].* ]] && sudo yum install openjpeg2-devel gcc-c++ poppler-cpp-devel pkgconfig python2-devel redhat-rpm-config -y
|
||||
([[ "${DISTRI}" == "fedora33" ]] || [[ "${DIST_VER}" =~ ^[8].* ]]) && sudo yum install openjpeg2-devel gcc-c++ poppler-cpp-devel pkgconfig python3-devel redhat-rpm-config -y
|
||||
|
||||
sudo chmod 2777 /usr/local/src
|
||||
sudo chown root:users /usr/local/src
|
||||
|
|
@ -19,7 +19,7 @@ mispmodulesRHEL () {
|
|||
${SUDO_WWW} ${PATH_TO_MISP}/venv/bin/pip install -U .
|
||||
${SUDO_WWW} ${PATH_TO_MISP}/venv/bin/pip install pyfaup censys
|
||||
# some misp-modules dependencies for RHEL<8
|
||||
[[ "${DIST_VER}" =~ ^[7].* ]] && sudo yum install rubygem-rouge rubygem-asciidoctor zbar-devel opencv-devel -y
|
||||
([[ "${DISTRI}" == "fedora33" ]] || [[ "${DIST_VER}" =~ ^[7].* ]]) && sudo yum install rubygem-rouge rubygem-asciidoctor zbar-devel opencv-devel -y
|
||||
# some misp-modules dependencies for RHEL8
|
||||
[[ "${DIST_VER}" =~ ^[8].* ]] && sudo dnf install https://packages.endpoint.com/rhel/8/main/x86_64/endpoint-repo-8-1.ep8.noarch.rpm -y && sudo yum install zbar-devel opencv-devel -y
|
||||
|
||||
|
|
@ -44,46 +44,6 @@ mispmodulesRHEL () {
|
|||
# Test misp-modules
|
||||
${SUDO_WWW} ${PATH_TO_MISP}/venv/bin/misp-modules -l 127.0.0.1 -s &
|
||||
sudo systemctl enable --now misp-modules
|
||||
|
||||
# Enable Enrichment, set better timeouts
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hover_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_hover_timeout" 150
|
||||
# TODO:"Investigate why the next one fails"
|
||||
#${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_asn_history_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_cve_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_dns_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_btc_steroids_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_ipasn_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_yara_syntax_validator_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_yara_query_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_pdf_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_docx_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_xlsx_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_pptx_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_ods_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_odt_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Enrichment_services_port" 6666
|
||||
|
||||
# Enable Import modules, set better timeout
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_services_port" 6666
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_ocr_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_mispjson_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_openiocimport_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_threatanalyzer_import_enabled" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Import_csvimport_enabled" true
|
||||
|
||||
# Enable Export modules, set better timeout
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_enable" true
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_url" "http://127.0.0.1"
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_services_port" 6666
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_timeout" 300
|
||||
${SUDO_WWW} ${RUN_PHP} -- ${CAKE} Admin setSetting "Plugin.Export_pdfexport_enabled" true
|
||||
}
|
||||
# <snippet-end 3_misp-modules_RHEL.sh>
|
||||
```
|
||||
|
|
|
|||
|
|
@ -50,47 +50,6 @@ mispmodules () {
|
|||
|
||||
# Sleep 9 seconds to give misp-modules a chance to spawn
|
||||
sleep 9
|
||||
|
||||
# Enable Enrichment, set better timeouts
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_services_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_hover_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_hover_popover_only" false
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_timeout" 300
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_hover_timeout" 150
|
||||
# TODO:"Investigate why the next one fails"
|
||||
#$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_asn_history_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_cve_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_dns_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_btc_steroids_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_ipasn_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_yara_syntax_validator_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_yara_query_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_pdf_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_docx_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_xlsx_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_pptx_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_ods_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_odt_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_services_url" "http://127.0.0.1"
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Enrichment_services_port" 6666
|
||||
|
||||
# Enable Import modules, set better timeout
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_services_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_services_url" "http://127.0.0.1"
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_services_port" 6666
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_timeout" 300
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_ocr_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_mispjson_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_openiocimport_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_threatanalyzer_import_enabled" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Import_csvimport_enabled" true
|
||||
|
||||
# Enable Export modules, set better timeout
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Export_services_enable" true
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Export_services_url" "http://127.0.0.1"
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Export_services_port" 6666
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Export_timeout" 300
|
||||
$SUDO_WWW $CAKE Admin setSetting "Plugin.Export_pdfexport_enabled" true
|
||||
}
|
||||
# <snippet-end 3_misp-modules.sh>
|
||||
```
|
||||
|
|
|
|||
|
|
@ -155,12 +155,13 @@ checkFlavour () {
|
|||
fi
|
||||
echo "${FLAVOUR} support is experimental at the moment"
|
||||
;;
|
||||
rhel|ol|sles)
|
||||
rhel|ol|sles|fedora)
|
||||
if [ -z "$dist_version" ] && [ -r /etc/os-release ]; then
|
||||
# FIXME: On fedora the trimming fails
|
||||
dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
|
||||
dist_version=${dist_version:0:1} # Only interested about major version
|
||||
dist_version=${dist_version:0:1} # Only interested about major version
|
||||
fi
|
||||
# Only tested for RHEL 7 so far
|
||||
# FIXME: Only tested for RHEL 7 so far
|
||||
echo "${FLAVOUR} support is experimental at the moment"
|
||||
;;
|
||||
*)
|
||||
|
|
@ -230,7 +231,7 @@ EOF
|
|||
|
||||
checkInstaller () {
|
||||
# Workaround: shasum is not available on RHEL, only checking sha512
|
||||
if [[ "${FLAVOUR}" == "rhel" ]] || [[ "${FLAVOUR}" == "centos" ]]; then
|
||||
if [[ "${FLAVOUR}" == "rhel" ]] || [[ "${FLAVOUR}" == "centos" ]] || [[ "${FLAVOUR}" == "fedora" ]]; then
|
||||
INSTsum=$(sha512sum ${0} | cut -f1 -d\ )
|
||||
/usr/bin/wget --no-cache -q -O /tmp/INSTALL.sh.sha512 https://raw.githubusercontent.com/MISP/MISP/2.4/INSTALL/INSTALL.sh.sha512
|
||||
chsum=$(cat /tmp/INSTALL.sh.sha512)
|
||||
|
|
|
|||
|
|
@ -2,4 +2,4 @@
|
|||
|
||||
The MISP INSTALL guides are dual-licensed under [GNU Affero General Public License version 3](http://www.gnu.org/licenses/agpl-3.0.html) and [CC-BY-SA 4.0 international](https://creativecommons.org/licenses/by-sa/4.0/).
|
||||
|
||||
* Copyright \(C\) 2014-2018 CIRCL - Computer Incident Response Center Luxembourg
|
||||
* Copyright \(C\) 2014-2021 CIRCL - Computer Incident Response Center Luxembourg
|
||||
|
|
|
|||
|
|
@ -599,6 +599,8 @@ sudo sed -i -e '$i \sudo -u apache ${PATH_TO_MISP}/venv/bin/misp-modules -l 127.
|
|||
|
||||
{!generic/misp-dashboard-centos.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/MISP_CAKE_init.md!}
|
||||
|
||||
{!generic/INSTALL.done.md!}
|
||||
|
|
|
|||
|
|
@ -443,6 +443,7 @@ then
|
|||
sudo chmod u+x /etc/rc.local
|
||||
fi
|
||||
```
|
||||
|
||||
{!generic/MISP_CAKE_init.md!}
|
||||
|
||||
```bash
|
||||
|
|
@ -454,6 +455,8 @@ sudo sed -i -e '$i \sysctl vm.overcommit_memory=1\n' /etc/rc.local
|
|||
|
||||
{!generic/misp-modules-debian.md!}
|
||||
|
||||
{!generic/misp-modules-cake.md!}
|
||||
|
||||
```bash
|
||||
echo "Admin (root) DB Password: $DBPASSWORD_ADMIN"
|
||||
echo "User (misp) DB Password: $DBPASSWORD_MISP"
|
||||
|
|
@ -497,6 +500,8 @@ sudo service apache2 restart
|
|||
|
||||
{!generic/misp-dashboard-debian.md!}
|
||||
|
||||
{!generic/misp-dashboard-cake.md!}
|
||||
|
||||
{!generic/viper-debian.md!}
|
||||
|
||||
{!generic/ssdeep-debian.md!}
|
||||
|
|
|
|||
|
|
@ -31,7 +31,7 @@
|
|||
##
|
||||
|
||||
# This makes use of the standard variables used by the installer
|
||||
eval "$(curl -fsSL https://raw.githubusercontent.com/MISP/MISP/2.4/docs/generic/globalVariables.md | grep -v \`\`\`)"
|
||||
eval "$(curl -fsSL https://raw.githubusercontent.com/MISP/MISP/2.4/docs/generic/globalVariables.md | awk '/^# <snippet-begin/,0' | grep -v \`\`\`)"
|
||||
MISPvars > /dev/null 2>&1
|
||||
|
||||
# Leave empty for NO debug messages, if run with set -x or bash -x it will enable DEBUG by default
|
||||
|
|
|
|||
|
|
@ -28,7 +28,7 @@
|
|||
# TODO: Check db user exists.
|
||||
|
||||
# This makes use of the standard variables used by the installer
|
||||
eval "$(curl -fsSL https://raw.githubusercontent.com/MISP/MISP/2.4/docs/generic/globalVariables.md | grep -v \`\`\`)"
|
||||
eval "$(curl -fsSL https://raw.githubusercontent.com/MISP/MISP/2.4/docs/generic/globalVariables.md | awk '/^# <snippet-begin/,0' | grep -v \`\`\`)"
|
||||
MISPvars > /dev/null 2>&1
|
||||
|
||||
# Leave empty for NO debug messages, if run with set -x or bash -x it will enable DEBUG by default
|
||||
|
|
|
|||
Loading…
Reference in New Issue