User Tools
утилита_aide
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
утилита_aide [2020/07/20 18:34] val [Debian] |
утилита_aide [2026/07/21 06:45] (current) val [Утилита aide] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Утилита aide ====== | ====== Утилита aide ====== | ||
| + | * [[https://en.wikipedia.org/wiki/Host-based_intrusion_detection_system|Host-based intrusion detection system]] | ||
| * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | ||
| * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | ||
| - | ===== Debian ===== | ||
| - | * [[Сервис MTA#Настройка MTA]] | + | |
| + | ==== Установка и инициализация ==== | ||
| + | |||
| + | * **!!!** Для Debian выполнить [[Сервис MTA#Настройка MTA]] | ||
| <code> | <code> | ||
| # apt install aide | # apt install aide | ||
| - | # aideinit | + | # less /etc/aide/aide.conf |
| + | |||
| + | # time aideinit | ||
| ... | ... | ||
| - | End timestamp: ... (run time: 1m 47s) | + | real 2m42.560s |
| - | # less /etc/aide/aide.conf | + | # ls -l /var/lib/aide |
| + | </code> | ||
| + | ==== Вносим изменения ==== | ||
| + | <code> | ||
| # vim /usr/local/sbin/webd | # vim /usr/local/sbin/webd | ||
| + | </code> | ||
| + | ==== Детектируем изменения ==== | ||
| + | <code> | ||
| + | debian12/13/ubuntu24# time aide -c /etc/aide/aide.conf --check | ||
| + | ... | ||
| + | real 4m47.421s | ||
| - | # aide -c /var/lib/aide/aide.conf.autogenerated --check | + | или |
| - | # aide -c /var/lib/aide/aide.conf.autogenerated --update | + | debian12/13/ubuntu24# systemctl status dailyaidecheck.timer |
| - | # cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db | + | или |
| - | # /etc/cron.daily/aide | + | debian12/13/ubuntu24# time /usr/share/aide/bin/dailyaidecheck --crondaily |
| + | ... | ||
| + | real 4m52.791s | ||
| - | + | ||
| + | </code> | ||
| + | ==== Фиксируем текущее состояние системы ==== | ||
| + | <code> | ||
| + | debian12/13/ubuntu24# cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db | ||
| </code> | </code> | ||
утилита_aide.1595259266.txt.gz · Last modified: 2020/07/20 18:34 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
