Ensure filesystem integrity is regularly checked

Kako se proverava

Metod provere: Komanda ljuske

e=$(systemctl is-enabled aidecheck.timer 2>/dev/null)
[ "$e" = enabled ] && systemctl is-active --quiet aidecheck.timer && { echo compliant; exit 0; }
c=$( (crontab -u root -l 2>/dev/null; cat /etc/crontab /etc/cron.d/* 2>/dev/null; ls /etc/cron.daily /etc/cron.weekly 2>/dev/null) | grep -E '(^|[^#].*)\baide' )
[ -n "$c" ] && echo compliant || echo 'no aidecheck.timer or aide cron job'

Očekivani izlaz

compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands: # cp ./config/aidecheck.service /etc/systemd/system/aidecheck.service # cp ./config/aidecheck.timer /etc/systemd/system/aidecheck.timer # chmod 0644 /etc/systemd/system/aidecheck.* # systemctl reenable aidecheck.timer # systemctl restart aidecheck.timer # systemctl daemon-reload OR Run the following command: # crontab -u root -e Add the following line to the crontab: 0 5 * * * /usr/bin/aide.wrapper --config /etc/aide/aide.conf --check

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

tmaegis scan --target ros