Article ID: 7027, created on Mar 23, 2014, last review on May 11, 2014

  • Applies to:
  • Plesk 12.5 for Linux
  • Plesk 12.0 for Linux
  • Plesk 11.0 for Linux
  • Plesk 11.5 for Linux

问题

我开始通过 Parallels Plesk Panel 的 模块 -> Watchdog -> 安全 -> 开始 进行安全检查。过程完成得很成功,但是,在 Watchdog 安全检查日志中出现以下警告信息:

/var/log/rkhunter.log
--->8---
[15:36:28] Warning:The command '/usr/bin/GET' has been replaced by a script:/usr/bin/GET: perl script text executable
[15:36:28] Warning:The command '/usr/bin/groups' has been replaced by a script:/usr/bin/groups:Bourne shell script text executable
[15:36:28] Warning:The command '/usr/bin/ldd' has been replaced by a script:/usr/bin/ldd:Bourne shell script text executable
[15:36:31] Warning:The command '/sbin/ifdown' has been replaced by a script:/sbin/ifdown:Bourne-Again shell script text executable
[15:36:31] Warning:The command '/sbin/ifup' has been replaced by a script:/sbin/ifup:Bourne-Again shell script text executable
---8<---


这些文件存在于系统中。我如何重新配置 RKHunter 核对二进制文件的存在并移除警告信息?

解决方案

建议您添加以下指令到 RKHunter 配置文件:

/usr/local/psa/etc/modules/watchdog/rkhunter.conf
--->8---
SCRIPTWHITELIST=/usr/bin/GET
SCRIPTWHITELIST=/usr/bin/groups
SCRIPTWHITELIST=/usr/bin/ldd
SCRIPTWHITELIST=/sbin/ifdown
SCRIPTWHITELIST=/sbin/ifup
---8<---

a914db3fdc7a53ddcfd1b2db8f5a1b9c 29d1e90fd304f01e6420fbe60f66f838 56797cefb1efc9130f7c48a7d1db0f0c 2a5151f57629129e26ff206d171fbb5f e335d9adf7edffca6a8af8039031a4c7 aea4cd7bfd353ad7a1341a257ad4724a 0a53c5a9ca65a74d37ef5c5eaeb55d7f 01bc4c8cf5b7f01f815a7ada004154a2 742559b1631652fadd74764ae8be475e

Email subscription for changes to this article