Trying to get security tool COPS to work.

[Daniel Simard]

Hi,
I download the lastest cops security tool from their website. I un-gzipped it, un tarred it. I read the README file and it says that I can run in 2 different ways.

1st: By compiling it.
2nd: By running the perl version.

I decided to try the perl version. I had to edit the cops executiable to put the location of my perl at the beginning of the script. (/opt/perl/bin/perl)

the first step, it says to run ./reconfigure.pl (which I ran) and nothing happens.
Then, it says that cops should work. I run ./cops and get the following 3 error messages.

Precedence problem: open CONFIG should be open(CONFIG) at ./cops line 86.
Precedence problem: open FILE1 should be open(FILE1) at ./cops line 222.
Precedence problem: open FILE2 should be open(FILE2) at ./cops line 223.

Any help is much appreciated.

Here is what is on line 86.


line 86:
----> open CONFIG || die "can't open $CONFIG: $!";

Any help is much appreciated

[Gavin Clarke]

I know what you mean I tried to get cops going some time ago, rather unsuccessfully. I keep meaning to go back to it.

Did you try making the change it suggested (perhaps taking a copy first)? Did that just throw up more errors?

[Zeev Schultz]

hmm...shouldn't it be :
open($CONFIG) (just guessing)?

[Elena Leontieva · Accepted solution]

Below are the steps that I posted before, and it worked for me.

- obtain cops.1.04.tar from www.cerias.purdue.edu
- mkdir /secure/cops
- download cops.1.04.tar in /secure/cops
- in /secure/cops do tar xvf cops.1.04.tar
- cd /secure/cops/cops_104/perl
- edit two lines:
/secure/cops/cops_104/perl/cops.cf as
line 12: $SECURE_USERS="root"
/secure/cops/cops_104/perl/roo.chk as
line 78: $ftp='/etc/ftpd/ftpusers'
- execute COPS with Perl v.4.
- /usr/contrib/bin/perl cops -x
- find portential problems in
/secure/cops/cops_104/perl/hostname/year_mon_date

The C/shell version of COPS had some problems and did not work for me.