ELS – Easy Linux Security Script Kurulumu – Kullanımı

Ayhan ARDA

16 yıl önce

Az önce farketti&gbreve;im bir shell scriptinden bahsedece&gbreve;im&period;Bu script sunucularda yapmam&inodot;z gereken bir çok güvenlik ve optimizasyonunu otomatik yapmam&inodot;za olanak sa&gbreve;l&inodot;yor , tek komutla indirilip kuruluyor , tek komutla büyük i&scedil;lemlerin üstesinden geliyor , kurulumu için a&scedil;a&gbreve;&inodot;daki komutu kullanabilirsiniz&period;&NewLine;wget -O installer&period;sh http&colon;//els&period;web4host&period;net/installer&period;sh&semi; chmod +x installer&period;sh&semi; sh installer&period;sh&NewLine;A&scedil;a&gbreve;&inodot;da kurulum sat&inodot;r&inodot;n&inodot; ve detaylar&inodot; görebilirsiniz&period;&NewLine;[root&commat;elssecurity ~]&num; wget -O installer&period;sh http&colon;//els&period;web4host&period;net/installer&period;sh&semi; chmod +x installer&period;sh&semi; sh installer&period;sh &NewLine;&&num;8211&semi;14&colon;34&colon;35&&num;8211&semi; http&colon;//els&period;web4host&period;net/installer&period;sh &NewLine;Resolving els&period;web4host&period;net&&num;8230&semi; 173&period;212&period;207&period;52 &NewLine;Connecting to els&period;web4host&period;net|173&period;212&period;207&period;52|&colon;80&&num;8230&semi; connected&period; &NewLine;HTTP request sent, awaiting response&&num;8230&semi; 200 OK &NewLine;Length&colon; 3049 (3&period;0K) [application/x-sh] &NewLine;Saving to&colon; &grave;installer&period;sh&&num;8217&semi;&NewLine;100&percnt;[==========&gt&semi;] 3,049 12&period;3K/s in 0&period;2s&NewLine;14&colon;34&colon;36 (12&period;3 KB/s) &&num;8211&semi; &grave;installer&period;sh&&num;8217&semi; saved [3049/3049]&NewLine;Downloading&&num;8230&semi; &NewLine;Done&period; &NewLine;MD5 valid&period; &NewLine;Extracting&&num;8230&semi; &NewLine;Done&period;&NewLine;Easy Linux Security (ELS) successfully installed in /usr/local/els &NewLine;Type &&num;8216&semi;els &&num;8211&semi;help&&num;8217&semi; for available options&period;&NewLine;Baz&inodot; yapabildiklerinden k&inodot;saca bahsedeyim , daha alt k&inodot;s&inodot;mda da tüm yapabildiklerinin ç&inodot;kt&inodot;s&inodot;n&inodot; yazd&inodot;m&period;&NewLine;<&excl;--more-->RKHunter Kurulumu &NewLine;RKHunter için bir cronjob olu&scedil;turmak ve e-mail ile durum bildirimi &NewLine;APF Kurulumu / Update Edilmesi &NewLine;BFD Kurulumu / Update Edilmesi &NewLine;CHKROOTKIT Kurulumu &NewLine;CHKROOTKIT için cronjob olu&scedil;turmak ve gece e-mail ile durum bildirimi &NewLine;Telnet’in devre d&inodot;&scedil;&inodot; b&inodot;rak&inodot;lmas&inodot; &NewLine;SSH2 Protokolunun kullan&inodot;lmas&inodot;na zorlamak &NewLine;/tmp dizinini nosuid, noexec parametreleri ile mount etmek &NewLine;/var/tmp dizinini nosuid ve noexec parametreleri ile mount etmek &NewLine;/dev/shm dizinini nosuid ve noexec parametreleri ile mount etmek &NewLine;Zend Optimizer Kurulumu / Update Edilmesi &NewLine;eAccelerator Kurulumu / Update Edilmesi &NewLine;MySQL 4&period;1 ve 5&period;0 için Yap&inodot;land&inodot;rma Optimizasyonu &NewLine;MySQL’in 5&period;0′a upgrade’i &NewLine;SSH’&inodot;n portunun de&gbreve;i&scedil;tirilmesi&period; &NewLine;SSH üzerinden direk root login’in disable edilmesi ve wheel user eklenmesi&period; &NewLine;MySQL tablolar&inodot;n&inodot;n optimize edilmesi &NewLine;LibSafe Kurulumu / Update edilmesi &NewLine;ImageMagick Kurulumu / Update edilmesi &NewLine;Harden sysctl&period;conf&NewLine;Burda ise scriptin tam olarak neler yapabilece&gbreve;ini görebilirsiniz&period;Ben hayran kald&inodot;m gerçekten&period;&NewLine;ELS specific commands&colon; &NewLine;&&num;8211&semi;checkall &colon; Check if everything is okay &NewLine;&&num;8211&semi;help &colon; Print this help screen &NewLine;&&num;8211&semi;update &colon; Update the ELS (this) program to the latest &NewLine;&colon; version &NewLine;&&num;8211&semi;version &colon; Print the current ELS version&NewLine;ELS usage&colon; &NewLine;&&num;8211&semi;all &colon; Install/update all supported software, improve &NewLine;&colon; security and optimize some programs and &NewLine;&colon; configurations &NewLine;&&num;8211&semi;apc &colon; Install/Update APC (Alternative PHP Cache) &NewLine;&&num;8211&semi;apf &colon; Install/Update APF Firewall &NewLine;&&num;8211&semi;bfd &colon; Install/Update BFD (Brute Force Detection) &NewLine;&&num;8211&semi;chkrootkit &colon; Install/Update CHKROOTKIT &NewLine;&&num;8211&semi;chkrootkitcron &colon; Install a CHKROOTKIT cronjob (to run nightly) &NewLine;&&num;8211&semi;chmodfiles &colon; Chmod dangerous files to root only &NewLine;&&num;8211&semi;cpvcheck &colon; Check your control panel version &NewLine;&&num;8211&semi;disablephpfunc &colon; Disable dangerous PHP functions &NewLine;&&num;8211&semi;disabletelnet &colon; Disable telnet &NewLine;&&num;8211&semi;distrocheck &colon; Check your OS version &NewLine;&&num;8211&semi;eaccelerator &colon; Install/Update eAccelerator &NewLine;&&num;8211&semi;forcessh2 &colon; Force SSH protocol 2 &NewLine;&&num;8211&semi;hardensysctl &colon; Hardening sysctl&period;conf &NewLine;&&num;8211&semi;imagemagick &colon; Install/Update ImageMagick &NewLine;&&num;8211&semi;libsafe &colon; Install/Update Libsafe &NewLine;&&num;8211&semi;mysqloptimizedb &colon; Run a simple MySQL table optimization and repair command &NewLine;&&num;8211&semi;mysqlrenice &colon; Renice MySQL to -20 for highest priority &NewLine;&&num;8211&semi;mytop &colon; Install/Update MyTOP &NewLine;&&num;8211&semi;optimizemysqlconf &colon; Optimize MySQL configuration file (/etc/my&period;cnf) &NewLine;&&num;8211&semi;rkhunter &colon; Install/Update RKHunter &NewLine;&&num;8211&semi;rkhuntercron &colon; Install a RKHunter cronjob (to run nightly) &NewLine;&&num;8211&semi;rootloginemail &colon; Add an alert for root login to &NewLine;&colon; /root/&period;bash&lowbar;profile (email must be provided &NewLine;&colon; for this option) &NewLine;&&num;8211&semi;securepartitions &colon; Secure /tmp, /var/tmp, and /dev/shm partitions &NewLine;&colon; (whether in /etc/fstab or not) &NewLine;&&num;8211&semi;setupcrons &colon; Setup RKHunter and CHKROOTKIT cronjobs as well &NewLine;&colon; as Root Login Alert &NewLine;&&num;8211&semi;sshport &colon; Change the port the SSH deamon is listening on &NewLine;&colon; (also modifies APF config to use new port) &NewLine;&&num;8211&semi;suhosin &colon; Install/Update suhosin &NewLine;&&num;8211&semi;up2dateconfig &colon; Edit up2date configuration file to exclude some &NewLine;&colon; programs &NewLine;&&num;8211&semi;vps &colon; Similiar to &&num;8211&semi;all, but skips operations not &NewLine;&colon; compatable with Virtual Private Servers &NewLine;&&num;8211&semi;wheeluser &colon; Add a wheel user and force no root login in the &NewLine;&colon; SSH deamon&&num;8217&semi;s configuration &NewLine;&&num;8211&semi;yumconfig &colon; Edit yum configuration file to exclude some &NewLine;&colon; programs &NewLine;&&num;8211&semi;xcache &colon; Install/Update XCache &NewLine;&&num;8211&semi;zendopt &colon; Install/Update Zend Optimizer&NewLine;Remove/Undo functions&colon; &NewLine;&&num;8211&semi;enablephpfunc &colon; Enable dangerous PHP functions &NewLine;&&num;8211&semi;enablephprg &colon; Enable PHP register&lowbar;globals &NewLine;&&num;8211&semi;removeapf &colon; Remove APF firewall &NewLine;&&num;8211&semi;removebfd &colon; Remove BFD (Brute Force Detection) &NewLine;&&num;8211&semi;rmchkrootkitcron &colon; Remove a CHKROOTKIT cronjob &NewLine;&&num;8211&semi;rmrkhuntercron &colon; Remove a RKHunter cronjob &NewLine;&&num;8211&semi;undomysqlrenice &colon; Undo MySQL renice&NewLine;DirectAdmin specific commands&colon; &NewLine;&&num;8211&semi;updateda &colon; Update DirectAdmin version&NewLine;cPanel specific commands&colon; &NewLine;&&num;8211&semi;eximdictatk &colon; Install the Exim Dictionary Attack ACL for &NewLine;&colon; cPanel/WHM servers &NewLine;&&num;8211&semi;fantasticoinstall &colon; Install the Fantastico files for cPanel/WHM &NewLine;&colon; servers &NewLine;&&num;8211&semi;fixrndc &colon; Fix RNDC if not already configured on &NewLine;&colon; cPanel/WHM servers &NewLine;&&num;8211&semi;tweakcpsettings &colon; Tweak cPanel&&num;8217&semi;s Tweak Settings file&NewLine;Destekledi&gbreve;i i&scedil;letim sistemleri a&scedil;a&gbreve;&inodot;daki gibi&semi;&NewLine;Red Hat Linux &NewLine;Red Hat Enterprise Linux &NewLine;Fedora Core &NewLine;CentOS &NewLine;Debian&NewLine;Ayhan ARDA&NewLine;&NewLine;