User Tools
утилита_aide
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
утилита_aide [2025/10/16 12:04] val [Установка и инициализация] |
утилита_aide [2026/07/21 06:45] (current) val [Утилита aide] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Утилита aide ====== | ====== Утилита aide ====== | ||
| + | * [[https://en.wikipedia.org/wiki/Host-based_intrusion_detection_system|Host-based intrusion detection system]] | ||
| * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | * [[https://rtfm.co.ua/linux-sistema-aide-otslezhivanie-izmenenij-fajlov-i-direktorij/|Linux: система AIDE – отслеживание изменений файлов и директорий]] | ||
| * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | * [[https://blog.rapid7.com/2017/06/30/how-to-install-and-configure-aide-on-ubuntu-linux/|How to Install and Configure AIDE on Ubuntu Linux]] | ||
| Line 27: | Line 28: | ||
| ==== Детектируем изменения ==== | ==== Детектируем изменения ==== | ||
| <code> | <code> | ||
| - | debian10# aide -c /var/lib/aide/aide.conf.autogenerated --check | + | debian12/13/ubuntu24# time aide -c /etc/aide/aide.conf --check |
| - | debian11_12/ubuntu24# time aide -c /etc/aide/aide.conf --check | + | |
| ... | ... | ||
| real 4m47.421s | real 4m47.421s | ||
| Line 34: | Line 34: | ||
| или | или | ||
| - | debian10_11# /etc/cron.daily/aide | + | debian12/13/ubuntu24# systemctl status dailyaidecheck.timer |
| - | debian12/ubuntu24# time /usr/share/aide/bin/dailyaidecheck --crondaily | + | |
| + | или | ||
| + | |||
| + | debian12/13/ubuntu24# time /usr/share/aide/bin/dailyaidecheck --crondaily | ||
| ... | ... | ||
| real 4m52.791s | real 4m52.791s | ||
| Line 43: | Line 46: | ||
| ==== Фиксируем текущее состояние системы ==== | ==== Фиксируем текущее состояние системы ==== | ||
| <code> | <code> | ||
| - | debian10# aide -c /var/lib/aide/aide.conf.autogenerated --update | + | debian12/13/ubuntu24# cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db |
| - | + | ||
| - | debian11_12/ubuntu24# cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db | + | |
| </code> | </code> | ||
утилита_aide.1760605465.txt.gz · Last modified: 2025/10/16 12:04 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
