User Tools
утилита_aide
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
утилита_aide [2024/05/13 17:53] val |
утилита_aide [2026/07/21 06:45] (current) val [Утилита aide] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Утилита aide ====== | ====== Утилита aide ====== | ||
| + | * [[https://en.wikipedia.org/wiki/Host-based_intrusion_detection_system|Host-based intrusion detection system]] | ||
| * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | ||
| * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | ||
| - | ===== Debian/Ubuntu ===== | ||
| - | * Для Debian выполнить [[Сервис MTA#Настройка MTA]] | + | |
| + | ==== Установка и инициализация ==== | ||
| + | |||
| + | * **!!!** Для Debian выполнить [[Сервис MTA#Настройка MTA]] | ||
| <code> | <code> | ||
| # apt install aide | # apt install aide | ||
| Line 12: | Line 15: | ||
| # less /etc/aide/aide.conf | # less /etc/aide/aide.conf | ||
| - | # aideinit | + | # time aideinit |
| ... | ... | ||
| - | End timestamp: ... (run time: 1m 47s) | + | real 2m42.560s |
| # ls -l /var/lib/aide | # ls -l /var/lib/aide | ||
| </code> | </code> | ||
| - | Вносим изменения | + | |
| + | ==== Вносим изменения ==== | ||
| <code> | <code> | ||
| # vim /usr/local/sbin/webd | # vim /usr/local/sbin/webd | ||
| </code> | </code> | ||
| - | Детектируем изменения | + | ==== Детектируем изменения ==== |
| <code> | <code> | ||
| - | debian10# aide -c /var/lib/aide/aide.conf.autogenerated --check | + | debian12/13/ubuntu24# time aide -c /etc/aide/aide.conf --check |
| - | debian11_12/ubuntu24# aide -c /etc/aide/aide.conf --check | + | ... |
| + | real 4m47.421s | ||
| или | или | ||
| - | debian10_11# /etc/cron.daily/aide | + | debian12/13/ubuntu24# systemctl status dailyaidecheck.timer |
| - | debian12/ubuntu24# /usr/share/aide/bin/dailyaidecheck --crondaily | + | |
| + | или | ||
| + | |||
| + | debian12/13/ubuntu24# time /usr/share/aide/bin/dailyaidecheck --crondaily | ||
| + | ... | ||
| + | real 4m52.791s | ||
| </code> | </code> | ||
| - | Фиксируем текущее состояние системы | + | ==== Фиксируем текущее состояние системы ==== |
| <code> | <code> | ||
| - | debian10# aide -c /var/lib/aide/aide.conf.autogenerated --update | + | debian12/13/ubuntu24# cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db |
| - | + | ||
| - | debian11_12/ubuntu24# cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db | + | |
| </code> | </code> | ||
утилита_aide.1715612002.txt.gz · Last modified: 2024/05/13 17:53 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
