Line 1: |
Line 1: |
| {{Languages|Rkhunter}} | | {{Languages|Rkhunter}} |
− |
| |
− | {{Warning box| because of recent security issue, you should process with caution with this contrib. See http://seclists.org/oss-sec/2017/q2/643 . As default we have disabled the auto update feature of the script to prevent the issue described as CVE-2017-7480 to occurs, but the situation raise the question of the use of a script to improve security that could create a breach.}}
| |
| | | |
| =Rkhunter= | | =Rkhunter= |
Line 17: |
Line 15: |
| === Installation === | | === Installation === |
| | | |
| + | <tabs container><tab name="For SME 10"> |
| + | /usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs |
| + | </tab> |
| + | <tab name="For SME 9"> |
| # Log in (with username root) to the SMEserver console. | | # Log in (with username root) to the SMEserver console. |
| # Install smeserver-Rkhunter<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs</pre> You will get a y/N-question, answer y if it looks fine. There is no need to reboot the server. Note: for SME10, you need to add the epel repository to get the latest rkhunter:<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs,epel</pre> | | # Install smeserver-Rkhunter<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs</pre> You will get a y/N-question, answer y if it looks fine. There is no need to reboot the server. Note: for SME10, you need to add the epel repository to get the latest rkhunter:<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs,epel</pre> |
Line 22: |
Line 24: |
| # you should then issue: | | # you should then issue: |
| signal-event remoteaccess-update | | signal-event remoteaccess-update |
− | | + | </tab> |
| + | </tabs> |
| | | |
| Alternatively you can use the server-manager panel "Software installer" to add a new package and select smeserver-Rkhunter (repo smecontribs must be enabled) then do the reconfiguration and reboot task, instead of steps 1 and 2, then refresh your browser and configure Rkhunter,. | | Alternatively you can use the server-manager panel "Software installer" to add a new package and select smeserver-Rkhunter (repo smecontribs must be enabled) then do the reconfiguration and reboot task, instead of steps 1 and 2, then refresh your browser and configure Rkhunter,. |
Line 67: |
Line 70: |
| | | |
| ====updateMirrors===== | | ====updateMirrors===== |
− | enabled or disabled (default is empty for disabled. | + | |
− | As per issue CVE-2017-7480 you should keep this as disabled ! | + | This configuration was removed for SME10 version >= 6 as the issue has been resolved in the rkhunter code. |
| + | |
| + | <del>enabled or disabled (default is empty for disabled. |
| + | As per issue CVE-2017-7480 you should keep this as disabled !</del> |
| | | |
| === Uninstall === | | === Uninstall === |