aide-software:aide
Différences
Ci-dessous, les différences entre deux révisions de la page.
aide-software:aide [2018/09/11 08:53] – créée ronan | aide-software:aide [2019/01/11 15:45] (Version actuelle) – rguyader | ||
---|---|---|---|
Ligne 1: | Ligne 1: | ||
====== AIDE (Advanced Intrusion Detection Environment) ====== | ====== AIDE (Advanced Intrusion Detection Environment) ====== | ||
- | # apt-get update && apt-get install aide | + | <code bash> |
+ | apt-get update && apt-get install aide | ||
+ | </ | ||
Change destination mail if not root | Change destination mail if not root | ||
+ | | ||
+ | <code bash> | ||
+ | vi / | ||
+ | MAILTO= | ||
- | # vi /etc/ | + | aideinit |
- | MAILTO= | + | </code> |
- | + | ||
- | # aideinit | + | |
Install new db as reference | Install new db as reference | ||
- | # cp / | + | <code bash> |
+ | cp / | ||
+ | </ | ||
Manual check | Manual check | ||
- | # aide -c / | + | <code bash> |
+ | aide -c / | ||
+ | </ | ||
Manual update | Manual update | ||
- | + | <code bash> | |
- | # | + | aide -c / |
+ | </ | ||
On files/conf changes : | On files/conf changes : | ||
- | # aideinit | + | <code bash> |
- | # | + | aideinit |
- | # | + | cp / |
+ | aide -c / | ||
+ | </ | ||
aide.conf defines change patterns, ex : | aide.conf defines change patterns, ex : | ||
Directories that change their contents during system operation | Directories that change their contents during system operation | ||
- | | + | i |
+ | <code bash> | ||
+ | VarDir = OwnerMode+n+i+X | ||
+ | </ | ||
then you find exceptions in dir / | then you find exceptions in dir / | ||
warning : when error is present in configuration files, the parser not always point them... | warning : when error is present in configuration files, the parser not always point them... |
aide-software/aide.1536656001.txt.gz · Dernière modification : 2018/09/11 08:53 de ronan