Yadda ake sanin idan Linux ɗinmu na da malware ko rootkits

Gnu / Linux ingantaccen tsarin aiki ne. Abubuwan halaye waɗanda suke cikin sabobin da yawa da cikin kwamfutoci da yawa. Koyaya, tsaronta ba malware bane ko hujjar rootkit wanda zai iya cutar da tsarin aikin mu ko kuma kawo cikas ga tsaron mu.

Wannan shine dalilin da ya sa muke buƙatar 'yan kayan aiki kaɗan don gano waɗannan ramuka na tsaro kuma muyi aiki a kansu. A lokuta da yawa, zamu sami waɗannan kayan aikin a cikin rumbunan hukuma na rarraba mu kuma a wasu lokutan zamu buƙaci amfani da kayan shareware ko software na gwaji.

Rootkits

A farkon lamarin zamu gano rootkits. Wannan software tana ƙara zama sananne a cikin keɓaɓɓu kuma ba kwamfutocin sirri ba. A cikin Gnu / Linux muna da kayan aiki da ake kira chkrootkit. Wannan kayan aikin shine mai daukar hoto mai karfi na tsarin aikin mu amma ba ya magance matsalolin rootkit, don haka da zarar an gano dole ne mu tafi daya bayan daya mu duba mu warware su. A wannan bangaren, - chkrootkit na iya ƙirƙirar ƙirar ƙarya, ƙananan kurakurai waɗanda zasu iya wanzuwa, saboda haka an bada shawarar yin bitar faɗakarwar da aka karɓa ɗayan ɗaya.

Don shigar da chkrootkit dole ne mu rubuta mai zuwa a cikin tashar:

sudo apt-get install chkrootkit ( o el equivalente gestor de paquetes de la distribución)

Kuma don gudanar da shirin, dole kawai mu rubuta mai zuwa:

sudo chkrootkit

malware

Batun ɓarna da cuta ya fi matsala saboda muna buƙatar ƙungiyar waje don sanin ko ƙungiyarmu tana da malware ko a'a. A wannan yanayin zamuyi amfani da kayan aikin ISPProtect. ISPProtect software ne mai biya wanda ke da sifa kyauta cewa zamu iya amfani dashi don sanin idan muna da malware ko a'a. A wannan yanayin dole ne mu buɗe m kuma rubuta abubuwa masu zuwa:

sudo apt-get install php-cli
sudo mkdir -p /usr/local/ispprotect
sudo chown -R root:root /usr/local/ispprotect
sudo chmod -R 750 /usr/local/ispprotect
sudo cd /usr/local/ispprotect
sudo wget http://www.ispprotect.com/download/ispp_scan.tar.gz
sudo tar xzf ispp_scan.tar.gz
sudo rm -f ispp_scan.tar.gz
sudo ln -s /usr/local/ispprotect/ispp_scan /usr/local/bin/ispp_scan

A wannan yanayin, an yi amfani da Ubuntu, amma ana iya amfani da shi a cikin kowane rarraba, saboda wannan dole ne mu canza mai sarrafa kunshin dacewa don manajan kunshin daidai.

ISPProtect kayan aikin biyan kuɗi ne amma tsarin gwajin ta na iya zama mai tasiri sosai Kuma idan muna son ƙwararriyar bincike, koyaushe za mu iya biyan lasisi kuma mu sami wannan sabis ɗin.

ƙarshe

Waɗannan kayan aikin suna da sauƙi da sauri don shigarwa, wani abu mai mahimmanci don tsaron tsarin aikinmu. Hakanan akwai wasu hanyoyin, amma ko dai basu cika dukkan buƙatun ba ko kuma suna da rikitarwa. A kowane hali, kayan aiki biyu ne masu kyau don fara binciken tsaro na tsarin aikin mu Shin, ba ku tunani?