linux-malware-detect icon indicating copy to clipboard operation
linux-malware-detect copied to clipboard

maldet --mkpubpaths needs proper documentation

Open ponasromas opened this issue 4 years ago • 0 comments

Version 1.6.4.

Documentation portion:

Given that the maldetect installation path is owned by user root, we either need to set a pub path world writable (777) or populate the pub path with user owned paths. It was undesirable to set any path world writable and as such a feature to populate path data was created. This feature is controlled with the --mkpubpaths flag and is executed from cron every 10 minutes, it will only execute if the public_scan variable is enabled in conf.maldet. As such, it is important to make sure the public_scan variable is set to enabled (1) in conf.maldet and it is advised to run 'maldet --mkpubpaths' manually to prepopulate the user paths. There after, the cron will ensure new users have paths created no later than 10 minutes after creation.

is wrong/outdated. There is no public_scan variable in conf.maldet and cron is */5.

For good practice, minuid should not be 10 as a default. Minimum 1000.

As for feature request: delete maldet pub/$user if system user is removed. System cleanup is good.

ponasromas avatar Apr 06 '20 12:04 ponasromas