MISP/app
Christophe Vandeplas 03ad7d3acd fixes event with no attributes in REST request 2012-05-04 12:44:27 +02:00
..
Config added CyDefSIG.name to allow changing the title of the site 2012-05-04 09:52:45 +02:00
Console Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
Controller fixes event with no attributes in REST request 2012-05-04 12:44:27 +02:00
Lib Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
Locale/eng/LC_MESSAGES Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
Model Basic sync push seems to work 2012-05-03 14:32:49 +02:00
Plugin Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
Test Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
Vendor Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
View added CyDefSIG.name to allow changing the title of the site 2012-05-04 09:52:45 +02:00
files Implemented file-upload of attachment or password protected 2012-03-23 20:04:22 +01:00
tmp Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
webroot Start of documentation concerning REST. 2012-04-07 09:38:15 +02:00
.htaccess Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00
LICENSE Print Cascading Stylesheets and minor layout fixes 2012-03-25 15:02:15 +02:00
MYSQL.txt Basic sync push seems to work 2012-05-03 14:32:49 +02:00
README.txt Logging in for REST using Authorized HTTP header field. 2012-04-06 16:32:33 +02:00
index.php Migration to CakePHP 2.1. 2012-03-15 15:06:45 +01:00

README.txt

                                                                     

TODOs
-----

Auth
- Prevent bruteforce auth attempts

implement auditing/logging system
- add / edit events and signatures
- failed / success logins (with source IP, headers,...)

Security
- force cookie reset after login


INSTALLATION INSTRUCTIONS
-------------------------
Install the following libraries:
apt-get install zip
apt-get install pear
pear install Crypt_GPG    # need version >1.3.0 

TODO rewrite instructions using git clones and git submodules


Download CyDefSIG using git in the /var/www/ directory. 

cd /var/www/
git clone git@code.lab.modiss.be:cydefsig.git

Download and extract CakePHP 2.x to the web root directory:

cd /tmp/
wget https://nodeload.github.com/cakephp/cakephp/tarball/2.1
tar zxvf cakephp-cakephp-<version>.tar.gz
cd cakephp-cakephp-*

Now remove the app directory and move everything from CakePHP to var/www

rm -Rf app .gitignore 
mv * /var/www/cydefsig/
mv .??* /var/www/cydefsig/

TODO TODO Install the CakePHP REST Plugin in the plugins directory.
(https://github.com/kvz/cakephp-rest-plugin/tree/cake-2.0)  
using git submodule



Check if the permissions are set correctly using the following commands as root:

chown -R <user>:www-data /var/www/cydefsig
chmod -R 750 /var/www/cydefsig
chmod -R g+s /var/www/cydefsig
cd /var/www/cydefsig/app/
chmod -R g+w tmp
chmod -R g+w files

Import the empty MySQL database in /var/www/cydefsig/app/MYSQL.txt using phpmyadmin or mysql>.

Now configure your apache server with the DocumentRoot /var/www/cydefsig/app/webroot/

Configure the fields in the files:
database.php : login, port, password, database
bootstrap.php: CyDefSIG.*, GnuPG.*
core.php : debug, 

Generate a GPG encryption key.
sudo -u www-data gpg --homedir /var/www/cydefsig/.gnupg --gen-key


Now log in using the webinterface:
The default user/pass = admin@admin.test/admin 

Don't forget to change the email, password and authentication key after installation.



Recommended patches
-------------------
By default CakePHP exposes his name and version in email headers. Apply a patch to remove this behavior.