Preparing for release 0.70.0

dominiquearpin · Feb 28, 2014 · 52aa87a · 52aa87a
1 parent cba9ca7
commit 52aa87a
Show file tree

Hide file tree

Showing 30 changed files with 46 additions and 265 deletions.
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,10 @@
+*.pyc
+*.pyo
+var/
+conf/nginx/vFense.conf
+var/rethinkdb
+var/scheduler
+var/redis
+var/packages
+var/tmp
+/var/log/*.log
diff --git a/README.md b/README.md
@@ -1,4 +1,20 @@
-rv
+vFense 0.7.0
 ==
 
-New Implementation of RemediationVault
+HowTo Install vFense Server Application
+
+Download the latest Release
+
+1. tar -xzvf 0.7.0.tar.gz
+2. mv vFense-0.70.0 /opt/TopPatch
+3. cd /opt/TopPatch
+4. source bin/activate_toppatch
+5. python tp/src/scripts initialize_vFense.py --password=password_goes_here
+6. wait a while ( Pulling down the latest CVE/NVD, and Ubuntu USN data )
+7. sudo cp /opt/TopPatch/tp/src/daemon/vFense /etc/init.d/
+8. sudo cp /opt/TopPatch/tp/src/daemon/nginx /etc/init.d/
+9. sudo update-rc.d vFense defaults
+10. sudo udpate-rc.d nginx defaults
+11. sudo service nginx start
+12. sudo service vFense start
+
diff --git a/conf/nginx.conf b/conf/nginx.conf
@@ -45,5 +45,5 @@ http {
 	# Virtual Host Configs
 	##
 
-	include /opt/TopPatch/conf/nginx/nginx-remediation_vault.conf;
+	include /opt/TopPatch/conf/nginx/vFense.conf;
 }
diff --git a/conf/nginx/nginx-remediation_vault.conf b/conf/nginx/nginx-remediation_vault.conf
diff --git a/logs/error.log b/logs/error.log
@@ -5,3 +5,10 @@
 2013/10/19 12:46:36 [warn] 17809#0: low address bits of 192.168.8.0/16 are meaningless in /opt/TopPatch/conf/nginx/nginx-remediation_vault.conf:61
 2013/10/19 12:46:43 [warn] 17820#0: low address bits of 192.168.8.0/16 are meaningless in /opt/TopPatch/conf/nginx/nginx-remediation_vault.conf:61
 2013/10/19 12:46:44 [warn] 17824#0: low address bits of 192.168.8.0/16 are meaningless in /opt/TopPatch/conf/nginx/nginx-remediation_vault.conf:61
+2014/02/28 09:21:10 [warn] 50158#0: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /opt/TopPatch/conf/nginx.conf:1
+2014/02/28 09:21:10 [emerg] 50158#0: open() "/opt/TopPatch/var/tmp/nginx.pid" failed (13: Permission denied)
+2014/02/28 09:37:20 [emerg] 51576#0: open() "/opt/TopPatch/conf/nginx/nginx-remediation_vault.conf" failed (2: No such file or directory) in /opt/TopPatch/conf/nginx.conf:48
+2014/02/28 09:38:36 [emerg] 51708#0: open() "/opt/TopPatch/conf/nginx/nginx-remediation_vault.conf" failed (2: No such file or directory) in /opt/TopPatch/conf/nginx.conf:48
+2014/02/28 09:38:46 [warn] 51725#0: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /opt/TopPatch/conf/nginx.conf:1
+2014/02/28 09:38:46 [emerg] 51725#0: open() "/opt/TopPatch/conf/nginx/nginx-remediation_vault.conf" failed (2: No such file or directory) in /opt/TopPatch/conf/nginx.conf:48
+2014/02/28 09:39:07 [warn] 51745#0: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /opt/TopPatch/conf/nginx.conf:1
diff --git a/tp/src/daemon/rvserver → tp/src/daemon/vFense b/tp/src/daemon/rvserver → tp/src/daemon/vFense
@@ -1,10 +1,10 @@
 #! /bin/sh
 
 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-NAME=TopPatchServer
-DESC=TopPatchServer
+NAME=vFense
+DESC=vFense
 TOPPATCHDIR=/opt/TopPatch
-DAEMON=/opt/TopPatch/tp/src/daemon/TopPatchd
+DAEMON=/opt/TopPatch/tp/src/daemon/vFensed
 USER=toppatch
 
 set -e

diff --git a/tp/src/daemon/TopPatchd → tp/src/daemon/vFensed b/tp/src/daemon/TopPatchd → tp/src/daemon/vFensed
@@ -39,7 +39,7 @@ for queue in RQ_WORKER_QUEUES:
 
 #################################################################
 RVL_PORTS = range(9020, 9030)
-RVLISTENER = 'src/rvlistener.py'
+RVLISTENER = 'src/vFense_listener.py'
 for port in RVL_PORTS:
     pid_file = '%sRVL_PID_%s.pid' % (PID_DIR, str(port))
     rvl = 'RvListener port %s' % (str(port))
@@ -49,7 +49,7 @@ for port in RVL_PORTS:
 
 ##################################################################
 RVW_PORTS = range(9060, 9061)
-RVWEB = 'src/rvweb.py'
+RVWEB = 'src/vFense_web.py'
 for port in RVW_PORTS:
     pid_file = '%sRVW_PID_%s.pid' % (PID_DIR, str(port))
     rvw = 'RvWeb port %s' % (str(port))
@@ -92,12 +92,6 @@ if not os.path.exists('/opt/TopPatch/var/rethinkdb/'):
     os.mkdir('/opt/TopPatch/var/rethinkdb/')
 if not os.path.exists('/opt/TopPatch/var/log/'):
     os.mkdir('/opt/TopPatch/var/log/')
-if not os.path.exists('/opt/TopPatch/var/lib/'):
-    os.mkdir('/opt/TopPatch/var/lib/')
-    os.mkdir('/opt/TopPatch/var/lib/ssl')
-    os.mkdir('/opt/TopPatch/var/lib/ssl/client')
-    os.mkdir('/opt/TopPatch/var/lib/ssl/client/csr')
-    os.mkdir('/opt/TopPatch/var/lib/ssl/client/keys')
 
 SERVICES.append((RVSCHEDULER, RVSCHEDULER_PIDFILE, 'RvScheduler'))
 ALLSERVICES.append((RVSCHEDULER, RVSCHEDULER_PIDFILE, 'RvScheduler'))

diff --git a/tp/src/plugins/cve/__init__.pyc b/tp/src/plugins/cve/__init__.pyc
diff --git a/tp/src/plugins/cve/bulletin_parser.pyc b/tp/src/plugins/cve/bulletin_parser.pyc
diff --git a/tp/src/plugins/cve/cve_constants.pyc b/tp/src/plugins/cve/cve_constants.pyc
diff --git a/tp/src/plugins/cve/cve_db.pyc b/tp/src/plugins/cve/cve_db.pyc
diff --git a/tp/src/plugins/cve/cve_parser.pyc b/tp/src/plugins/cve/cve_parser.pyc
diff --git a/tp/src/plugins/cve/downloader.pyc b/tp/src/plugins/cve/downloader.pyc
diff --git a/tp/src/plugins/cve/get_all_ubuntu_usns.pyc b/tp/src/plugins/cve/get_all_ubuntu_usns.pyc
diff --git a/tp/src/scripts/initialize_rv.py → tp/src/scripts/initialize_vFense.py b/tp/src/scripts/initialize_rv.py → tp/src/scripts/initialize_vFense.py
@@ -36,7 +36,7 @@
 REDIS_PID_FILE = '/opt/TopPatch/var/tmp/redis-6379.pid'
 RETHINK_PID_FILE = '/opt/TopPatch/var/tmp/rethinkdb.pid'
 TOPPATCH_HOME = '/opt/TopPatch/'
-
+print 'FPPP'
 parser = argparse.ArgumentParser(description='Initialize Rv Options')
 parser.add_argument(
     '--dnsname', dest='dns_name', default=None,
@@ -115,6 +115,8 @@ def initialize_db():
         os.mkdir('/opt/TopPatch/tp/src/plugins/cve/data/xml', 0773)
     if not os.path.exists('/opt/TopPatch/tp/src/plugins/cve/data/html/ubuntu'):
         os.makedirs('/opt/TopPatch/tp/src/plugins/cve/data/html/ubuntu', 0773)
+    if not os.path.exists('/usr/lib/libpcre.so.1'):
+        os.symlink('/opt/TopPatch/lib/libpcre.so.1', '/usr/lib') 
 
     os.chdir(RETHINK_PATH)
     rethink_init = subprocess.Popen(['./rethinkdb', 'create',

diff --git a/tp/src/scripts/nginx_config_creator.py b/tp/src/scripts/nginx_config_creator.py
@@ -1,4 +1,4 @@
-NGINX_CONFIG_FILE = '/opt/TopPatch/conf/nginx/nginx-remediation_vault.conf'
+NGINX_CONFIG_FILE = '/opt/TopPatch/conf/nginx/vFense.conf'
 base_nginx_config = """server {
     listen         80;
     server_name    %(server_name)s localhost;
@@ -94,7 +94,7 @@
     }
 
     location ~* \.(?:ico|css|js|gif|jpe?g|png)$ {
-        root                    /opt/toppatch-ui;
+        root                    /opt/TopPatch/tp/wwwstatic;
         expires                 max;
         add_header              Pragma public;
         add_header              Cache-Control "public, must-revalidate, proxy-revalidate";

diff --git a/tp/src/rvlistener.py → tp/src/vFense_listener.py b/tp/src/rvlistener.py → tp/src/vFense_listener.py
diff --git a/tp/src/rvweb.py → tp/src/vFense_web.py b/tp/src/rvweb.py → tp/src/vFense_web.py
@@ -53,16 +53,11 @@
 from server.api.groups_api import *
 from server.api.customer_api import *
 from server.api.permissions_api import *
-##from server.api.toppatchretriever import *
 from server.api.monit_api import *
 from scripts.create_indexes import initialize_indexes_and_create_tables
 
 from tornado.options import define, options
 
-#import newrelic.agent
-#newrelic.agent.initialize('/opt/TopPatch/conf/newrelic.ini')
-
-
 define("port", default=9000, help="run on port", type=int)
 define("debug", default=True, help="enable debugging features", type=bool)
 

diff --git a/tp/wwwstatic/README.md b/tp/wwwstatic/README.md
diff --git a/var/lib/redis/6379/dump.rdb b/var/lib/redis/6379/dump.rdb
diff --git a/var/lib/ssl/client/csr/.gitignore b/var/lib/ssl/client/csr/.gitignore
diff --git a/var/lib/ssl/client/keys/.gitignore b/var/lib/ssl/client/keys/.gitignore
diff --git a/var/lib/ssl/client/keys/client.key b/var/lib/ssl/client/keys/client.key
diff --git a/var/lib/ssl/server/csr/.gitignore b/var/lib/ssl/server/csr/.gitignore
diff --git a/var/lib/ssl/server/keys/.gitignore b/var/lib/ssl/server/keys/.gitignore
diff --git a/var/lib/ssl/server/keys/CA.cert b/var/lib/ssl/server/keys/CA.cert
diff --git a/var/lib/ssl/server/keys/CA.key b/var/lib/ssl/server/keys/CA.key