wazuh-packages icon indicating copy to clipboard operation
wazuh-packages copied to clipboard

Failed to check md5sums using debsums

Open mcujba opened this issue 3 years ago • 1 comments

Wazuh version Install type Action performed Platform
4.3.7-1 Manager/Agent Install/reinstall/Upgrade Debian 10

I receive error report from debsums tool.
I tried to reinstall packages, removed file /var/lib/dpkg/info/wazuh-agent.md5sums and reinstall but error report continue to generate.

# ls -l /var/lib/dpkg/info/wazuh-agent.md5sums
-rw-r--r-- 1 root root 24837 Aug 19 08:02 /var/lib/dpkg/info/wazuh-agent.md5sums

Md5sums are not matched.

Agent log:
# debsums -s
debsums: changed file /var/ossec/etc/client.keys (from wazuh-agent package)
debsums: changed file /var/ossec/etc/localtime (from wazuh-agent package)
debsums: changed file /var/ossec/etc/ossec.conf (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_apache2224_rcl.txt (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_debian_linux_rcl.txt (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_rhel5_linux_rcl.txt (from wazuh-agent package)
debsums: changed file /var/ossec/etc/shared/cis_rhel6_linux_rcl.txt (from wazuh-agent package)
...
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/add_localfiles.sh (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/10/rootcheck.agent.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/10/rootcheck.manager.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/10/sca.files (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/7/sca.files (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/8/sca.files (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/9/sca.files (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/rootcheck.agent.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/rootcheck.manager.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/debian/sca.files (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/alerts.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/ar-commands.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/ar-definitions.template (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/etc/templates/config/generic/auth.template (from wazuh-agent package)
...
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/templates/wazuh-manager.service (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/update.sh (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/wazuh-client.sh (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/wazuh-local.sh (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/wazuh-server.sh (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/wazuh/deprecated_ruleset.txt (from wazuh-agent package)
debsums: missing file /var/ossec/packages_files/agent_installation_scripts/src/init/wazuh/wazuh.sh (from wazuh-agent package)
debsums: missing file /var/ossec/ruleset/sca/cis_debian7.yml (from wazuh-agent package)
Manager report:
# debsums -s
debsums: changed file /var/ossec/api/configuration/api.yaml (from wazuh-manager package)
debsums: changed file /var/ossec/etc/client.keys (from wazuh-manager package)
debsums: changed file /var/ossec/etc/decoders/local_decoder.xml (from wazuh-manager package)
debsums: changed file /var/ossec/etc/localtime (from wazuh-manager package)

...
debsums: changed file /var/ossec/framework/python/lib/python3.9/xml/sax/__pycache__/xmlreader.cpython-39.pyc (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/add_localfiles.sh (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/etc/templates/config/debian/10/rootcheck.agent.template (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/etc/templates/config/debian/10/rootcheck.manager.template (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/etc/templates/config/debian/10/sca.files (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/etc/templates/config/debian/7/sca.files (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/etc/templates/config/debian/8/sca.files (from wazuh-manager package)
...
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/src/init/wazuh/deprecated_ruleset.txt (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/src/init/wazuh/wazuh.sh (from wazuh-manager package)
debsums: missing file /var/ossec/packages_files/manager_installation_scripts/sunos/5/11/sca.files (from wazuh-manager package)
debsums: missing file /var/ossec/ruleset/sca/cis_debian10.yml.disabled (from wazuh-manager package)
debsums: missing file /var/ossec/ruleset/sca/cis_debian7.yml (from wazuh-manager package)

mcujba avatar Sep 21 '22 09:09 mcujba

Confirm

drdev avatar Oct 04 '22 10:10 drdev