Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Uninstall from Linux #1025

Closed
t3kg33k opened this issue Jan 16, 2017 · 3 comments
Closed

Uninstall from Linux #1025

t3kg33k opened this issue Jan 16, 2017 · 3 comments
Labels

Comments

@t3kg33k
Copy link

t3kg33k commented Jan 16, 2017

I was looking for documentation but was having a hard time finding it.
What are the steps for completely removing OSSEC from a Linux (Red Hat) machine?

@ddpbsd
Copy link
Member

ddpbsd commented Feb 2, 2017

Assuming you installed from source:
/var/ossec/bin/ossec-control stop && rm -rf /var/ossec && rm /etc/init.d/*ossec* && rm /etc/ossec-init.conf

@ddpbsd ddpbsd added the question label Feb 2, 2017
@ddpbsd ddpbsd closed this as completed Feb 2, 2017
@q2dg
Copy link

q2dg commented Feb 21, 2018

I think these steps should be mentioned in official documentation. I've had to look at here to know them...it's not beautiful

@kompjuteras
Copy link

Just to cover some missing parts....

/var/ossec/bin/ossec-control stop 
service ossec-hids stop 
chkconfig ossec-hids --del 
rm -rf /var/ossec 
rm -f /etc/ossec-init.conf 
rm -f /etc/init.d/*ossec* 
userdel ossecr 
userdel ossec 
groupdel ossec

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants