Giter VIP home page Giter VIP logo

puppet-rkhunter's Introduction

rkhunter

Build Status Puppet Forge Coverage Status

Table of Contents

  1. Overview
  2. Module Description - What the module does and why it is useful
  3. Setup - The basics of getting started with rkhunter
  4. Usage - Configuration options and additional functionality
  5. Reference - An under-the-hood peek at what the module is doing and how
  6. Limitations - OS compatibility, etc.
  7. Development - Guide for contributing to the module

Overview

The rkhunter module provides the installation procedure for Rkhunter including the setup of the initial rkhunter database.

Module Description

The rkhunter module provides a security feature that scan the local system for rootkit fragments and warn you, if detetcted.

Setup

What rkhunter affects

  • rkhunter package.
  • rkhunter configuration file.
  • rkhunter database.

Setup requirements

You need to activate the EPEL repository before you can setup the SSMTP instance. If you use a rpm based system from the RedHat family you can use my yum module (thbe-yum):

class { "::yum": repo_epel => true }

Beginning with rkhunter

include '::rkhunter' is enough to get you up and running if the parameters point to proper values. If you wish to pass in parameters like which servers to use then you can use:

class { '::rkhunter':
  root_email => '[email protected]',
}

Usage

All interaction with the rkhunter module can be done through the main rkhunter class. This means you can simply toggle the options in the rkhunter main class to get the full functionality.

I just want rkhunter, what's the minimum I need?

include '::rkhunter'

I just want to route all mails to central mail gateway, nothing else.

class { '::rkhunter':
  root_email => '[email protected]',
  tftp => true,
}

Reference

See https://github.com/thbe/puppet-rkhunter/blob/master/REFERENCE.md

Limitations

This module has been built on and tested against Puppet 5 and higher.

The module has been tested on:

  • CentOS 7
  • Debian 9
  • Ubuntu 18.04

Testing on other platforms has been light and cannot be guaranteed.

Development

If you like to add or improve this module, feel free to fork the module and send me a merge request with the modification.

Contributors

The list of contributors can be found at: https://github.com/thbe/puppet-rkhunter/graphs/contributors

puppet-rkhunter's People

Contributors

alet avatar derdanne avatar elisiano avatar fnerdwq avatar mave007 avatar qs5779 avatar sybernot avatar thbe avatar

Stargazers

 avatar

Watchers

 avatar  avatar  avatar

puppet-rkhunter's Issues

check-mk-agent check wrong path

check-mk-agent veresion: check-mk-agent-1.2.6p16-3.el7.x86_64
OS: CentOS 7.2

xinetd.d service path: /etc/xinetd.d/check-mk-agent

<% if scope.lookupvar('rkhunter::check_mk') then -%>
XINETD_ALLOWED_SVC=/etc/xinetd.d/check_mk
<% end -%>

Path perhaps could be parameterized?

file of file properties file missing

I wonder if it's worth creating it in the module, I stuck the code in the service.pp since nothing was happening in there and I was looking at making it scan and output there too but reverted:

rkhunter service configuration

exec { 'rkhunter_file_properties_file':
creates => '/var/lib/rkhunter/db/rkhunter.dat',
command => '/usr/bin/rkhunter --propupd --quiet',
}

EXISTWHITELIST is missed

when you run
[root@rkhunter ~]# rkhunter --propupd
Invalid SCRIPTWHITELIST configuration option: Non-existent pathname: /usr/bin/whatis
so what its mean `
[root@rkhunter ~]# cat /etc/rkhunter.conf | grep EXISTWHITELIST

EXISTWHITELIST=""


solving is vi /etc/rkhunter.conf
remove # at #EXISTWHITELIST=""
add PATH /usr/bin/whatis

so it must looks like
[root@rkhunter ~]# cat /etc/rkhunter.conf | grep EXISTWHITELIST
EXISTWHITELIST="/usr/bin/whatis"

but it is manual steps, which we would not like ,please solve it in dev level ,en notify me when its done )
greetz

package resource title not interpolated properly

I fixed mine with some double quotes but I think the correct convention would be to have no quotes at all:

package { "${rkhunter::packageCore}": ensure => installed; }

or

package { ${rkhunter::packageCore}: ensure => installed; }

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.