A simple script to filter AIDE check cron jonbs, and reduce sysadmin overhead
- Shell 100%
|
|
||
|---|---|---|
| aideCheck.sh | added protection for aideCheck.sh 1st run wihtout aide being properly setup | |
| install.sh | added protection for aideCheck.sh 1st run wihtout aide being properly setup | |
| LICENSE | Initial commit | |
| README.md | Update README.md | |
aideCheck.sh
A simple script to filter AIDE (Advanced Intrusion Detection Environment https://github.com/aide/aide) checks in a cron job, and reduce sysadmin overhead.
Result:
- Send an email alert if MAIL recipient is set, only if AIDE find something wrong
- Return 1 if AIDE find something wrong
- May run
aide --updateafter execution, to update the database and avoid multiple alerts (disabled by default)
Prerequisite
You will need aide of course, use yum or apt to get it from your linux distribution repostiory. Help on aide is available here.
And the mutt command line mail tool to send summary reports (likely installed on your system, or available on the repository)
Installation with assisted configuration
Use wget (or curl) to download the installer script, and run it
wget https://codeberg.org/m33/aideCheck-sh/raw/branch/master/install.sh
./install.sh
And follow asked questions, this will setup aideCheck.sh and install it to /usr/local/bin/
Manual installation
Get aideCheck.sh
git clone https://codeberg.org/m33/aideCheck-sh
or
wget https://codeberg.org/m33/aideCheck-sh/raw/branch/master/install.sh
Edit the aideCheck.sh configuration header, copy the script where you like.