ELS - Easy Linux Security script

New clean centos 5.1 installation.
New DA installation

Then els install.
ELS 3.0.0.3 is the latest release, there is no need to update

Then els --all

The it stops after:
/etc/sysctl.conf exists.
sysctl is used to harden the kernel. If you have not hardened your
kernel with sysctl or do not know how to, it is recommended to have
ELS do it for you. Your current /etc/sysctl.conf will be backed up to
/usr/local/els/bakfiles/sysctl.conf.
Proceed? (y/n): y
Download Failed.
Invalid MD5.
Aborting.

Anyone any idea ?
 
Last edited:
The harden kernel option fails in the last version of ELS:
/etc/sysctl.conf exists.
sysctl is used to harden the kernel. If you have not hardened your
kernel with sysctl or do not know how to, it is recommended to have
ELS do it for you. Your current /etc/sysctl.conf will be backed up to
/usr/local/els/bakfiles/sysctl.conf.
Proceed? (y/n): y
Download Failed.
Invalid MD5.
Aborting.

How can i fix this?

PD. Thanks Martynas for Custombuild and ELS, there are 2 great scripts!!
 
I still don't have access to the server, so I can't fix it, because the 2nd developer is gone for almost ~1 year. I think I will move the project to the other server (rewrite with some bug-fixes will be done too).
 
Hi Martynas,

I ALWAYS use your plugins, i can support you. If you want, I can make a ftp with external access for this. I send to you the account by PM ;)

smtalk said:
I still don't have access to the server, so I can't fix it, because the 2nd developer is gone for almost ~1 year. I think I will move the project to the other server (rewrite with some bug-fixes will be done too).
Click to expand...
 
hi

what does I've to do if I've a custom php & mysql path?

I edited the /usr/local/bin/els

Code: 
. /usr/local/els/variables.sh
if [ -e /appli/php/bin/php ]; then
  PHPBINARY=/appli/php/bin/php

but if I do: els --optimizemysqlconf the my.cnf isnt optimized..

regards
 
debian els problem

same problem... my english not good. what is fix?

Ankh said:
Try using "get Term::ReadKey" and then goto: /root/.cpan/build/ and manual install it.

Got also a problem:
Code: 
server:~# els --optimizemysqlconf

/usr/local/bin/els: line 1856: /bin/rpm: No such file or directory
/bin/grep: /etc/my.cnf: No such file or directory
/bin/grep: /etc/my.cnf: No such file or directory
This feature can secure and optimize your MySQL configuration.
Proceed? (y/n): y
Checking MySQL version.  This may take a few seconds...
MySQL was not detected.
Please ensure the MySQL-server RPM package is installed.
&&
Code: 
server:~# els --mysqloptimizedb

This feature can optimize and repair all the MySQL database tables.
Proceed? (y/n): y
/usr/local/bin/els: line 2050: mysqlcheck: command not found
Done.

Running debian 4.0 ....
Click to expand...
 
Please do not use this script in production at the moment. As I said earlier - I still don't have access to the ELS server, so I'll create a new one soon. Thank you for patience! :)
 
New link
ELS - Easy Linux Security script
Code: 
wget -O installer.sh http://els.web4host.net/installer.sh; chmod +x installer.sh; sh installer.sh
remove old install
Code: 
rm -fr /usr/local/els

Debian user: do not use (MySQL 4.1 and 5.0 Configuration Optimization)


Wael
 
nice.. thank you..
but why is debian not supported?

and how can I use the script, if I've a custom php-path?

els --mysqlrenice
/usr/sbin/els: line 255: php: command not found

edit: just edit the els.sh:

else
PHPBINARY=/custom/path/to/php
Click to expand...
 
Last edited:
smtalk said:
I'm not the only one developer, and I don't have access to ELS server, so I can't update it at the moment. And it only has problems with CentOS 5 (when securing /tmp) and Debian.
Click to expand...

Perhaps you can explain how to undo the '--securepartitions' command which some might have done before they read about it in this thread as it might be very useful for them. Or is that part not working at all so that they do not have to worry about undoing?

Besides all the somewhat negative comments lately, the work it took us out of our hands in the earlier days is very much appreciated.

Those that have problems with it should wait, not use it at all or YDIY;)
 
els --imagemagick

ImageMagick is not installed.
ELS can now install ImageMagick.
Getting this on 3 servers with your latest revision.

Proceed? (y/n): y
/usr/bin/md5sum: ImageMagick-6.3.6-6.tar.gz: No such file or directory
Download Failed.
Invalid MD5.
Aborting.
 
smtalk said:
Please do not use this script in production at the moment. As I said earlier - I still don't have access to the ELS server, so I'll create a new one soon. Thank you for patience! :)
Click to expand...

Still not recommended to use envir. servers? Can I look at the list of ELS and do all security stuff myself, as a linux newbie :)
Thanks
 
You must log in or register to reply here.
Back
Top