Almalinux9.2_en AlmaLinux9.2 ; Logwatch , DiCe , Disk Usage Check Script
Logwatch , DiCe , Disk Usage Check Script
2023-05
Almalinux9.2_en 
Rocky Linux9.2_en Rocky Linux9.2 ; Logwatch , DiCE , Disk Usage Check Script
1. Logwatch
①Install
# dnf install logwatch
②Edit configuration file
2. DiCE
Whenever the global IP changes, which happens when the network is disconnected or the router is disconnected and rebooted, the dynamic DNS must be accessed to inform the user that the global IP has changed. DiCE does this automatically!
3.Introduce disk usage check script
3.1 Script Creation
# cd /var/www/system
# vi disk_capacity_check.sh
Almalinux9.2_en AlmaLinux9.2 ; OS Install
AlmaLinux 9.2 Install
AlmaLinux OS is a project launched by CloudLinux in the US as an alternative to CentOS. Currently, the AlmaLinux OS Foundation is the development parent organization.Following the general availability of Red Hat Enterprise Linux 9.0, AlmaLinux 9.0 was released on May 26, 2022.
Like Red Hat Enterprise Linux 9, AlmaLinux 9 utilizes the same package versions as the Linux 5.14 kernel, GCC 11, Python 3.9, and RHEL9.
Cockpit web management interface, enhanced kernel live patching, improved container and cloud integration, OpenSSL 3, and other security improvements.
This time we will install AlmaLinux 9.2 with a minor upgrade on May 11, 2023.
Rocky Linux9.2_en Rocky Linux9.2 ; FTP Server , Samba File Server
1.FTP Server
1. 1 Vsftpd Install
# dnf -y install vsftpd
1.2 Configure Vsftpd
Save the unedited vsftpd.conf with .bak
3. File server installation with Samba
Build a file server with access rights that requires user authentication with Samba.
Installation Procedure
①Create shared folders with access rights that require user authentication
②Accessible group creation
③Creation of users belonging to accessible groups
④Configuration File Editing
Rocky Linux9.2_en Rocky Linux9.2 ; Suricata , Tripwire , Chkrootkit
Suricata
SURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic.
The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.
1.advance preparation
①Activate the EPEL Repository
Tripwire
1.Installation
# dnf install -y tripwire
Chkrootkit
①Download and install chkrootkit
Rocky Linux9.2_en Rocky Linux9.2 ; System Backup and Restore
1.Website data backup
1-1.Backup under /var/www/html
①Create backup script file
# cd /var/www/system
# vi backup_html.sh
2.MySQL database backup
①Create backup script file
# cd /var/www/system
# vi db_my_backup.sh
3.Restore backup files under html
①Store HTML backup files in "/ (root)" directory
4.Restore Mysql backup file
①Save the database backup file to any directory and
（In the example, the directory is "/var/www/backup/db_bak".）Extracting data
Almalinux9.2_en AlmaLinux9.2 ; MySQL8 , WordPress Install
Mysql8 , WordPress Install
WordPress Install
1. Create database for Word Press
As an example, assume database [wp_db] database user [wp_user] password [?Ww123456]
Almalinux9.2_en AlmaLinux9.2 ; Suricata , Tripwire , Chkrootkit
Suricata
SURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic.
The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.
Tripwire
1.Download and installation
Chkrootkit
①Download and install chkrootkit
Almalinux9.2_en AlmaLinux9.2 ; Authenticated SSH connection with key pair
SSH connection with authentication using public key cryptography
Create public and private key pairs
Create a public/private key pair for a user connecting to a Linux server using OpenSSH.
Use ssh-keygen to create the key pair.
The creation of a public/private key pair must be done as a user with remote login privileges.
If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.