{"id":2344,"date":"2013-04-13T02:58:19","date_gmt":"2013-04-12T17:58:19","guid":{"rendered":"http:\/\/blog.isnext.net\/issy\/?p=2344"},"modified":"2013-04-13T02:59:10","modified_gmt":"2013-04-12T17:59:10","slug":"%e4%be%b5%e5%85%a5%e6%94%b9%e7%ab%84%e6%a4%9c%e7%9f%a5%e3%82%b7%e3%82%b9%e3%83%86%e3%83%a0-aide-%e3%82%92%e4%bd%bf%e3%81%86%e3%83%a1%e3%83%a2","status":"publish","type":"post","link":"https:\/\/blog.isnext.net\/issy\/archives\/2344","title":{"rendered":"\u4fb5\u5165\u6539\u7ac4\u691c\u77e5\u30b7\u30b9\u30c6\u30e0 AIDE \u3092\u4f7f\u3046\u30e1\u30e2"},"content":{"rendered":"<p><strong>\u25a0\u4fb5\u5165\u6539\u7ac4\u691c\u77e5\u30b7\u30b9\u30c6\u30e0 AIDE \u3092\u4f7f\u3046\u30e1\u30e2<\/strong><br \/>\n\u3000\u9577\u304fIDS\u3068\u3057\u3066Osiris\u3092\u4f7f\u3063\u3066\u304d\u305f\u304c\u6642\u52e2\u306b\u5408\u308f\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3063\u305f\u306e\u3067\u3001CentOS\/ScientificLinux\u306b\u6a19\u6e96\u88c5\u5099\u3055\u308c\u3066\u3044\u308bAIDE\u3092\u4f7f\u3063\u3066\u307f\u305f\u30e1\u30e2\u3002<\/p>\n<p><strong>\u25a0\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3068\u7c21\u5358\u306a\u4f7f\u3044\u65b9<\/strong><br \/>\n[code]# yum install aide<\/p>\n<p>\u8a2d\u5b9a\u7de8\u96c6\uff08\u30b3\u30e1\u30f3\u30c8\u5145\u5b9f\uff09<br \/>\n# vi \/etc\/aide.conf<br \/>\nR = p+l+i+n+u+g+s+m+acl+selinux+xattrs+md5<\/p>\n<p>\u521d\u671f\u5316<br \/>\n# aide -i<\/p>\n<p>\u6bd4\u8f03\u7528DB\u4f5c\u6210<br \/>\n# cp \/var\/lib\/aide\/aide.db.new.gz \/var\/lib\/aide\/aide.db.gz<\/p>\n<p>\u6bd4\u8f03<br \/>\n# aide -C<\/p>\n<p>\u901a\u5e38\u7528\u9014<br \/>\n# aide -u[\/code]<\/p>\n<p><strong>\u25a0CentOS5\u7cfb\u3067selinux\u3067\u554f\u984c\u304c\u51fa\u308b\u30b1\u30fc\u30b9\u306e\u8a2d\u5b9a\u5909\u66f4\u4f8b<\/strong><br \/>\n[code]# vi \/etc\/aide.conf<\/p>\n<p>R = p+l+i+n+u+g+s+m+acl+xattrs+md5<br \/>\nL = p+l+i+n+u+g+acl+xattrs<br \/>\n> = p+l+u+g+i+n+S+acl+xattrs<\/p>\n<p>DIR = p+l+i+n+u+g+acl+xattrs<\/p>\n<p>PERMS = p+l+i+u+g+acl<\/p>\n<p>DATAONLY =  p+l+n+u+g+s+acl+xattrs+md5+sha256+rmd160+tiger[\/code]<\/p>\n<p><strong>\u25a0Prelink\u95a2\u9023\u306e\u30a8\u30e9\u30fc\u304c\u51fa\u308b\u5834\u5408\u306e\u8a2d\u5b9a\u5909\u66f4\u4f8b<\/strong><br \/>\n[code]# sed -i &#8216;\/^PRELINKING=yes$\/s\/yes\/no\/&#8217; \/etc\/sysconfig\/prelink<br \/>\n# \/usr\/sbin\/prelink -ua[\/code]<\/p>\n<p><strong>\u25a0cron\u7528script\u4f8b<\/strong><br \/>\n[code]# vi \/root\/script\/aide.sh<br \/>\n#!\/bin\/bash<\/p>\n<p>\/usr\/sbin\/aide -u<br \/>\n\/bin\/cp -fr \/var\/lib\/aide\/aide.db.new.gz \/var\/lib\/aide\/aide.db.gz[\/code]<\/p>\n<p><strong>\u25a0MyNETS\u7528\u6539\u7ac4\u691c\u77e5\u8a2d\u5b9a\u4f8b<\/strong>\uff08\/var\/www\/sns\/www\u3092SNS root\u3068\u3059\u308b\uff09<br \/>\n[code]# vi \/etc\/aide.conf<br \/>\n# MyNETS SNS DIR<br \/>\n\/var\/www\/sns\/www NORMAL<br \/>\n!\/var\/www\/sns\/www\/img<br \/>\n!\/var\/www\/sns\/www\/var[\/code]<\/p>\n<p><strong>\u25a0\u53c2\u8003\u30ea\u30f3\u30af<\/strong><br \/>\n<a href=\"http:\/\/pooh.gr.jp\/?p=9633\">http:\/\/pooh.gr.jp\/?p=9633<\/a><br \/>\n<a href=\"http:\/\/blog.cecily.jp\/kotou\/51\/\">http:\/\/blog.cecily.jp\/kotou\/51\/<\/a><br \/>\n<a href=\"http:\/\/aikotobaha.blogspot.jp\/2011\/11\/rhel-aide.html\">http:\/\/aikotobaha.blogspot.jp\/2011\/11\/rhel-aide.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u25a0\u4fb5\u5165\u6539\u7ac4\u691c\u77e5\u30b7\u30b9\u30c6\u30e0 AIDE \u3092\u4f7f\u3046\u30e1\u30e2 \u3000\u9577\u304fIDS\u3068\u3057\u3066Osiris\u3092\u4f7f\u3063\u3066\u304d\u305f\u304c\u6642\u52e2\u306b\u5408\u308f\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3063\u305f\u306e\u3067\u3001CentOS\/ScientificLinux\u306b\u6a19\u6e96\u88c5\u5099\u3055\u308c\u3066\u3044\u308bAIDE\u3092\u4f7f\u3063\u3066\u307f\u305f\u30e1\u30e2\u3002 \u25a0\u30a4 &hellip; <a href=\"https:\/\/blog.isnext.net\/issy\/archives\/2344\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;\u4fb5\u5165\u6539\u7ac4\u691c\u77e5\u30b7\u30b9\u30c6\u30e0 AIDE \u3092\u4f7f\u3046\u30e1\u30e2&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[191,20,190,123,77],"class_list":["post-2344","post","type-post","status-publish","format-standard","hentry","category-linux","tag-aide","tag-centos","tag-ids","tag-scientific","tag-sns"],"_links":{"self":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/2344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/comments?post=2344"}],"version-history":[{"count":2,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/2344\/revisions"}],"predecessor-version":[{"id":2346,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/posts\/2344\/revisions\/2346"}],"wp:attachment":[{"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/media?parent=2344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/categories?post=2344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.isnext.net\/issy\/wp-json\/wp\/v2\/tags?post=2344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}