3,250
edits
Changes
Jump to navigation
Jump to search
Line 1:
Line 1: − − {{Warning box| because of recent security issue, you should process with caution with this contrib. See http://seclists.org/oss-sec/2017/q2/643 . As default we have disabled the auto update feature of the script to prevent the issue described as CVE-2017-7480 to occurs, but the situation raise the question of the use of a script to improve security that could create a breach.}} Line 17:
Line 15: + + + + − + + − + + − Line 67:
Line 70: − + − + + + +
no edit summary
{{Languages|Rkhunter}}
{{Languages|Rkhunter}}
=Rkhunter=
=Rkhunter=
=== Installation ===
=== Installation ===
<tabs container><tab name="For SME 10">
/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs
</tab>
<tab name="For SME 9">
# Log in (with username root) to the SMEserver console.
# Log in (with username root) to the SMEserver console.
# Install smeserver-Rkhunter<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs</pre> You will get a y/N-question, answer y if it looks fine. There is no need to reboot the server.
# Install smeserver-Rkhunter<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs</pre> You will get a y/N-question, answer y if it looks fine. There is no need to reboot the server. Note: for SME10, you need to add the epel repository to get the latest rkhunter:<pre>/usr/bin/yum install smeserver-rkhunter --enablerepo=smecontribs,epel</pre>
# you should then issue:
# you should then issue:
signal-event remoteaccess-update
signal-event remoteaccess-update
</tab>
</tabs>
Alternatively you can use the server-manager panel "Software installer" to add a new package and select smeserver-Rkhunter (repo smecontribs must be enabled) then do the reconfiguration and reboot task, instead of steps 1 and 2, then refresh your browser and configure Rkhunter,.
Alternatively you can use the server-manager panel "Software installer" to add a new package and select smeserver-Rkhunter (repo smecontribs must be enabled) then do the reconfiguration and reboot task, instead of steps 1 and 2, then refresh your browser and configure Rkhunter,.
=== Editing configuration ===
=== Editing configuration ===
====updateMirrors=====
====updateMirrors=====
enabled or disabled (default is empty for disabled.
As per issue CVE-2017-7480 you should keep this as disabled !
This configuration was removed for SME10 version >= 6 as the issue has been resolved in the rkhunter code.
<del>enabled or disabled (default is empty for disabled.
As per issue CVE-2017-7480 you should keep this as disabled !</del>
=== Uninstall ===
=== Uninstall ===