linux-malware-detect
linux-malware-detect copied to clipboard
maldet --mkpubpaths needs proper documentation
Version 1.6.4.
Documentation portion:
Given that the maldetect installation path is owned by user root, we either need to set a pub path world writable (777) or populate the pub path with user owned paths. It was undesirable to set any path world writable and as such a feature to populate path data was created. This feature is controlled with the --mkpubpaths flag and is executed from cron every 10 minutes, it will only execute if the public_scan variable is enabled in conf.maldet. As such, it is important to make sure the public_scan variable is set to enabled (1) in conf.maldet and it is advised to run 'maldet --mkpubpaths' manually to prepopulate the user paths. There after, the cron will ensure new users have paths created no later than 10 minutes after creation.
is wrong/outdated. There is no public_scan variable in conf.maldet and cron is */5.
For good practice, minuid should not be 10 as a default. Minimum 1000.
As for feature request: delete maldet pub/$user if system user is removed. System cleanup is good.