similar to: Wiki Update - Aide Link

On 02/02/2016 04:27 PM, Mike Thompson wrote: > Hello All, > > My username is MikeThompson > > The link to configure Aide at the bottom of this page: > https://wiki.centos.org/HowTos/OS_Protection > > Is dead, and says its dead, however, the old link to > http://www.bofh-hunter.com/2008/04/10/centos-5-and-aide/ now redirects > to a malicious website. > > One of

I have recently received an e-mail message regarding the above wiki page. I reproduce it, below, less the header. As I was the last to edit that page, I am mentioned in the details at its foot and that is from where the message author's error originates -- as I'm not the original creator of the page. The broken link is to a section of the blog of Jim "Evolution" Perrin. Are you

Evolution (aka JimPerrin - or is this the other way around?) has been working on this excellent wiki article: http://wiki.centos.org/HowTos/OS_Protection However, the discussion is taking place at his own blog site http://www.bofh-hunter.com/ . Because this is a CentOS wiki article, I just wonder why we cannot do it here. Sure, his blog site may collect a wider audience, but we traditionally

Having problems with Tripwire on C6, I installed AIDE from the base repository. x86_64 0.14-3.el6_2.2 base 123 k typing: aide result: "Couldn't open file /var/lib/aide/aide.db.gz for reading" (directory is empty and aide.db.gz does not exist.) typing: aide -i (for initialise the Aide database) result: "AIDE, version 0.14 ### AIDE database at

Hi, i would like to contribute to the WiKi. Lots of the articles are outdated... *Username: LucianMaly* *Proposed subject of my contribution(s): for example https://wiki.centos.org/HowTos/Skype <https://wiki.centos.org/HowTos/Skype> and https://wiki.centos.org/HowTos/OS_Protection <https://wiki.centos.org/HowTos/OS_Protection> plus some others* *Proposed location of my

I'm trying out aide since tripwire doesn't seem to be in the 5. releases anymore. I do not have Selinux on the server (no at installation), and I just yum installed the aide rpms, so I should have the latest. When I run my aide --init, I get all of these lines for all the files: lgetfilecon_raw failed for /usr/share/X11/app-defaults/XLogo:No data available I then copy the

One of my servers has recently started giving an error every time I run "aide --check". I ran it manually twice today with the same results. The second time, I added the -V flag, but that didn't give me anything useful. The system is currently running CentOS 5.3. Nothing on the system has changed recently (that I am aware of). The Aide database hasn't been updated in a few

Hi. On one of my servers aide just reported inode changes to a large bunch of files in a variety of directories, e.g. /usr/bin, /usr/sbin etc. This machine sits behind a couple of firewalls and it would be hard to get to. The day before I updated "clam*" and updated the aide database right after that: -rw------- 1 root root 7407412 Sep 26 10:58 aide.db.gz The problem was that the

Hello, There are some errors on the HowTos/OS_Protection page on the CentOS wiki. I would like to correct the errors. Thanks, William Voyek -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-docs/attachments/20090821/ad61f2f3/attachment-0004.html> -------------- next part -------------- A non-text

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade

Hi, does anyone know if aide should have access to this socket? SELinux is preventing /usr/sbin/aide from write access on the sock_file /var/run/winbindd/pipe. Thanks Patrick (on CentOS6 if that matters)

I've checked my system by aide and i've received information: changed: /bin changed: /bin/tar changed: /bin/mv changed: /bin/cp changed: /bin/ls changed: /bin/vi i don't remember that I changed those commands, what does it mean? Somebody broken in? or those commands are changed normally? -- This message has been scanned for viruses and dangerous content by MailScanner, and is

Hello, I hope this is the right mailing list for troubleshooting. My environment is: -CentOs 6.3 x64 -Samba as PDC -OpenLdap -Bind I followed this very nice tutorial to set-up the environment as PDC: http://www.server-world.info/en/note?os=CentOS_6 <http://www.server-world.info/en/note?os=CentOS_6&p=samba&f=4> &p=samba&f=4 And actually almost everything is

Rowland, 1. I installed Python 3.6.9 with SCL repository ( https://www.server-world.info/en/note?os=CentOS_7&p=python36) 2. I don't remove python 2.7 Thanks. Saludos. --- Miguel Coa M. El lun., 1 jun. 2020 a las 11:19, Rowland penny via samba (< samba at lists.samba.org>) escribi?: > On 01/06/2020 15:57, Miguel Angel Coa M. via samba wrote: > > Hi, > > I update the

Hi all; On OS Hardening ( http://wiki.centos.org/HowTos/OS_Protection ) there's a section on "Physical Protection" that includes requiring a single-user mode password. There's four lines that look something like this: echo "Require the root pw when booting into single user mode" >> /etc/inittab echo "~~:S:wait:/sbin/sulogin" >> /etc/inittab echo

But I guess with Akemi dragging me out over the OS_Protection page, I'm a member now :-P I've got no problem discussing it or other changes here. I set it up on my blog mostly because there wasn't a way to have comments on the page, and I didn't want to open the wiki page up to editing by outside sources right away. -- During times of universal deceit, telling the truth becomes

On Thu, Jun 21, 2018 at 12:01 PM, Lucian Maly <lucky at senior.cz> wrote: > Hi, i would like to contribute to the WiKi. Lots of the articles are > outdated... > > Username: LucianMaly > Proposed subject of my contribution(s): for example > https://wiki.centos.org/HowTos/Skype and > https://wiki.centos.org/HowTos/OS_Protection plus some others > Proposed location of my

My daily AIDE report suggests Grub''s stage2 file has changed. Could I trouble you for your opinion about how concerned I should be and what to do if your concern is moderate or higher? File: /boot/grub/stage2 MD5 : Mlkt9ZVo59SSjvodt+956Q== , yIQIMP6TUHG5BegtoOk0ug== SHA1 : ZxehaXSXcnH/WlcInHpFnyT1vcg= , dReBGlO3DIAB+mjsxUWioB8NlbE=

I've installed a mailserver according to these instructions: http://www.server-world.info/en/note?os=CentOS_7&p=httpd&f=13 When I try to login to the server through Roundcube webmail I get Connection to storage server failed. So checking on this [12-Jun-2015 11:28:53 +0000]: <6jap13r2> IMAP Error: Login failed for martin from 83.251.209.249. Could not connect to

I've got aide aide-0.13.1-4.el5 running on a server, and aide aide-0.13.1-2.0.4.el5 running on a similar server. There appears to have been a change in the way base directories are being monitored in the two versions. Both servers are running logical volumes, but it seems to not matter as I'm running aide on a server without logical volumes and the problem still shows up. Now the