[步骤] AIDE 的使用 (高级入侵检测环境:Adevanced Intrusion Detection Environment) (openSUSE & SLES 版)

步骤一:安装 AIDE

# zypper -n install aide

步骤二:生成 AIDE 的配置文件

2.1 生成 AIDE 配置文件的模板

# /usr/bin/aide --init
AIDE initialized database at /var/lib/aide/aide.db.new

Number of entries:      62624

2.2 将 AIDE 配置文件的模板转换成配置文件

# mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db

步骤三:使用 AIDE

# /usr/bin/aide --check
AIDE found differences between database and filesystem!!

Summary:
  Total number of entries:      62623
  Added entries:                0
  Removed entries:              1
  Changed entries:              0

(补充:AIDE 要检查哪些文件不检查哪些文件可以在 /etc/aide.conf 中设置)

[CONTENT] Linux Partition Advice

中文

Content One: BIOS Partition Advice

1.1 Partition Planning

/boot    >= 5G
/var/tmp >= 10G
/tmp     >= 10G
swap     >= 2G
/        all remaining space

1.2 Standard Partition and Logical Partition

/boot    Use standard partition
/var/tmp Use logical partition
/tmp     Use logical partition
swap     Use logical partition
/        Use logical partition

1.3 Format

/boot    xfs
/var/tmp xfs
/tmp     xfs
swap     swap
/        xfs

1.4 Mount Parameter

/boot    defaults
/var/tmp rw,nosuid,nodev,noexec,relatime,strictatime
/tmp     rw,nosuid,nodev,noexec,relatime,strictatime
swap     defaults
/        defaults

Content Two:EFI Partition Advice

2.1 Partition Planning

/boot/efi >= 5G
/var/tmp  >= 10G
/tmp      >= 10G
swap      >= 2G
/         all remaining space

2.2 Standard Partition and Logical Partition

/boot/efi Use standard partition
/var/tmp  Use logical partition
/tmp      Use logical partition
swap      Use logical partition
/         Use logical partition

2.3 Format

/boot/efi vfat
/var/tmp  xfs
/tmp      xfs
swap      swap
/         xfs

2.4 Mount Parameter

/boot/efi defaults
/var/tmp  rw,nosuid,nodev,noexec,relatime,strictatime
/tmp      rw,nosuid,nodev,noexec,relatime,strictatime
swap      defaults
/         defaults

[内容] Linux 分区建议

English

内容一:BIOS 分区建议

1.1 分区规划

/boot    >= 5G
/var/tmp >= 10G
/tmp     >= 10G
swap     >= 2G
/        all remaining space

1.2 标准分区和逻辑分区

/boot    Use standard partition
/var/tmp Use logical partition
/tmp     Use logical partition
swap     Use logical partition
/        Use logical partition

1.3 格式化

/boot    xfs
/var/tmp xfs
/tmp     xfs
swap     swap
/        xfs

1.4 挂载参数

/boot    defaults
/var/tmp rw,nosuid,nodev,noexec,relatime,strictatime
/tmp     rw,nosuid,nodev,noexec,relatime,strictatime
swap     defaults
/        defaults

内容二:EFI 分区建议

2.1 分区规划

/boot/efi >= 5G
/var/tmp  >= 10G
/tmp      >= 10G
swap      >= 2G
/         all remaining space

2.2 标准分区和逻辑分区

/boot/efi Use standard partition
/var/tmp  Use logical partition
/tmp      Use logical partition
swap      Use logical partition
/         Use logical partition

2.3 格式化

/boot/efi vfat
/var/tmp  xfs
/tmp      xfs
swap      swap
/         xfs

2.4 挂载参数

/boot/efi umask=0077,shortname=winnt 0 2
/var/tmp  rw,nosuid,nodev,noexec,relatime,strictatime
/tmp      rw,nosuid,nodev,noexec,relatime,strictatime
swap      defaults
/         defaults