Skip to content
English
Go to owlcyberdefense.com
  • There are no suggestions because the search field is empty.

Running DFTS in Enforcing Mode on CentOS 6.10

These instructions are available in the DFTS Version 3.0.0.1+ User Guides

Issue

When attempting to start DFTS on a RHEL or CentOS Version 6 system, you may see the following error:

ERROR: Failed to create message queue: /Owldata/dfts/keys/smi_on_dfts_blue1

/owl/dfts/send-blue/owlDFTSSend: line 417: exit: OwlScriptRetunCode_FailedCreateMessageQueue: numeric argument required

This error occurs when SELinux runs in enforcing mode on RHEL/CentOS 6. DFTS does not support this, but there is a workaround.

Workaround

This workaround involves editing script and configuration files from the command line. Follow these steps on the DFTS Send server:

  1. Log into the server as a user with sudo permissions.
  2. Issue the following command to elevate your permissions:
    sudo -i
  3. Enter your password.
  4. Issue the following command to change to the DFTS executable directory:
    cd /Owl/dfts/send-blue/
  5. Issue the following commands to make backup copies of the files to be changed:
    cp startDftsSend startDftsSend.old
    cp owlDftsSend owlDftsSend.old
    cp onotify.conf onotify.conf.old
  6. Open startDftsSend to line 42:
    vim +42 startDftsSend
  7. In vim, press i to switch to insert mode.
  8. Edit line 42 to change the MQ_KEYS_DIR parameter to /tmp/keys, as shown below:
    SUBDIR="/Owl/dfts"
    BINDIR="$SUBDIR/send-blue"
    SUBDIR_DATA="/Owldata/dfts"
    SUBDIR_UTILS="/Owl/utils"
    MQ_KEYS_DIR="/tmp/keys"
  9. Press Esc and issue the following command:
    :wq!
  10. On the Linux command line, issue the following command to open owlDftsSend to line 148:
    vim +148 owlDftsSend
  11. Press i to switch to insert mode.
  12. Edit line 148 to change the BASE_MQ_KEYS_DIR parameter to /tmp/keys, as shown below:
    BASE_DATADIR="$SUBDIR_DATA/senddata"
    BASE_PROBLEMDIR="$SUBDIR_DATA/problem"
    BASE_MQ_KEYS_DIR="/tmp/keys"
    BASE_LOGDIR="$SUBDIR_LOGS/logs"
  13. Press Esc and issue the following command:
    :wq!
  14. On the Linux command line, issue the following command to open onotify.conf:
    vim onotify.conf
  15. Press i to switch to insert mode.
  16. Edit the first line to change the ON_OUTPUT_QUEUE parameter to /tmp/keys as shown below:
    ON_OUTPUT_QUEUE   /tmp/keys/smi_on_dfts_blue
  17. Press Esc and issue the following command:
    :wq!
  18. If you are running DFTS as a service, issue the following command to restart the service:
    systemctl daemon-reload
  19. Attempt to start DFTS Send:
    startOwlDfts start