Function/security.bat at master · jaechansong/Function · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
#!/bin/bash
setsebool -P antivirus_can_scan_system 1
yum install -y epel-release
yum install -y clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd
cp /usr/share/doc/clamd.conf /etc/clamd.d/
sed -i -e "s/^Example/#Example/" /etc/clamd.d/clamd.conf
sed -i -e "s/^Example/#Example/" /etc/clamd.d/scan.conf
sed -i -e "s/^Example/#Example/" /etc/freshclam.conf
freshclam
echo "[Unit]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Description = freshclam scanner" >> /usr/lib/systemd/system/clam-freshclam.service
echo "After = network.target" >> /usr/lib/systemd/system/clam-freshclam.service
echo "[Service]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Type = forking" >> /usr/lib/systemd/system/clam-freshclam.service
echo "ExecStart = /usr/bin/freshclam -d -c 4" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Restart = on-failure" >> /usr/lib/systemd/system/clam-freshclam.service
echo "PrivateTmp = true" >> /usr/lib/systemd/system/clam-freshclam.service
echo "RestartSec = 20sec" >> /usr/lib/systemd/system/clam-freshclam.service
echo "[Install]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "WantedBy=multi-user.target" >> /usr/lib/systemd/system/clam-freshclam.service
systemctl enable clam-freshclam
systemctl enable clamd@scan
systemctl start clam-freshclam
systemctl start clamd@scan
systemctl status clam-freshclam
systemctl status clamd@scan
echo "#!/bin/sh" >> /usr/local/bin/clamscan.sh
echo "SDATE=$(date "+%%Y-%%m-%%d %%H:%%M:%%S")" >> /usr/local/bin/clamscan.sh
echo "echo $'Start Date :' $SDATE > /root/text.txt" >> /usr/local/bin/clamscan.sh
echo "clamscan -r /root >> /root/text.txt" >> /usr/local/bin/clamscan.sh
chmod 755 /usr/local/bin/clamscan.sh
cat <(crontab -l) <(echo "00 04 * * * /usr/local/bin/clamscan.sh") | crontab -

#수정(배포용)
#!/bin/bash
setsebool -P antivirus_can_scan_system 1
yum install -y epel-release
yum install -y clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd
cp /usr/share/doc/clamd.conf /etc/clamd.d/
sed -i -e "s/^Example/#Example/" /etc/clamd.d/clamd.conf
sed -i -e "s/^Example/#Example/" /etc/clamd.d/scan.conf
sed -i -e "s/^Example/#Example/" /etc/freshclam.conf
freshclam necho "[Unit]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Description = freshclam scanner" >> /usr/lib/systemd/system/clam-freshclam.service
echo "After = network.target" >> /usr/lib/systemd/system/clam-freshclam.service
echo "[Service]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Type = forking" >> /usr/lib/systemd/system/clam-freshclam.service
echo "ExecStart = /usr/bin/freshclam -d -c 4" >> /usr/lib/systemd/system/clam-freshclam.service
echo "Restart = on-failure" >> /usr/lib/systemd/system/clam-freshclam.service
echo "PrivateTmp = true" >> /usr/lib/systemd/system/clam-freshclam.service
echo "RestartSec = 20sec" >> /usr/lib/systemd/system/clam-freshclam.service
echo "[Install]" >> /usr/lib/systemd/system/clam-freshclam.service
echo "WantedBy=multi-user.target" >> /usr/lib/systemd/system/clam-freshclam.service
systemctl enable clam-freshclam
systemctl enable clamd@scan
systemctl start clam-freshclam
systemctl start clamd@scan
systemctl status clam-freshclam
systemctl status clamd@scan
echo "#!/bin/sh" > /usr/local/bin/clamscan.sh
echo "SDATE=$(date "+%%%%Y-%%%%m-%%%%d %%%%H:%%%%M:%%%%S")" >> /usr/local/bin/clamscan.sh
echo "echo $'Start Date :' $SDATE > /root/%s.txt" >> /usr/local/bin/clamscan.sh
echo "clamscan -ri / >> /root/%s.txt" >> /usr/local/bin/clamscan.sh
chmod 755 /usr/local/bin/clamscan.sh
cat <(crontab -l) <(echo "00 00 * * * /usr/local/bin/clamscan.sh") | crontab -
gcc %s_clnt.c -o %s_clnt
mv %s_clnt /root
cat <(crontab -l) <(echo "10 00 * * * /root/%s_clnt") | crontab -

#%s를 Txtfile_name(ID_Servername)으로 Formating
%(Txtfile_name, Txtfile_name, Txtfile_name, Txtfile_name, Txtfile_name, Txtfile_name)