# cd /opt/
# wget https://downloads.cisofy.com/lynis/lynis-2.6.6.tar.gz
# tar xvzf lynis-2.6.6.tar.gz
# mv lynis /usr/local/
# ln -s /usr/local/lynis/lynis /usr/local/bin/lynis

# lynis audit system

Initializing program
- Detecting OS...  [DONE]
- Checking profiles...   [DONE]
Program version:  2.6.6
Operating system:  Linux
Operating system name: CentOS
Operating system version:  CentOS Linux release 7.4.1708 (Core)
Kernel version:   4.17.6
Hardware platform:  x86_64
Hostname:   merionet
Profiles:   /usr/local/lynis/default.prf
Log file:    /var/log/lynis.log
Report file:   /var/log/lynis-report.dat
Report version:   1.0
Plugin directory:  /usr/local/lynis/plugins
Auditor:   [Not Specified]
Language:   en
Test category:   all
Test group:   all
- Program update status... [NO UPDATE]

0 3 * * * /usr/local/bin/lynis --quick 2>&1 | mail -s "Lynis Reports of My Server" [email protected]

Сегодня я расскажу, как настроить автоматическую установку обновлений безопасности в дистрибутивах Debian и Ubuntu.

aptitude update -y && aptitude install unattended-upgrades apt-listchanges -y

Unattended-Upgrade::Mail "root";

dpkg-reconfigure -plow unattended-upgrades

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

APT::Periodic::Verbose "2";

email_address=root

sftp username@host

lpwd  # Локальный каталог
pwd   # Удаленный каталог

ls    # Удалённые файлы
lls   # Локальные файлы

put file.txt

mput *.txt

get file.txt

mget *.txt

cd directory  # Удалённый каталог
lcd directory # Локальный каталог

mkdir remote_dir   # На удалённой системе
lmkdir local_dir   # На локальной системе

rm file.txt        # Удалить файл
rmdir directory    # Удалить каталог

curl -x proxy.example.com:8080 -U user:password -O https://example.com/yourfile.tar.gz

curl -I https://example.com

curl --data "firstName=John&lastName=Doe" https://example.com/form.php

curl -u username:password -O ftp://example.com/yourfile.tar.gz

curl -u username:password -T mylocalfile.tar.gz ftp://example.com

curl -I https://example.com --user-agent "CustomAgent/1.0"

curl --cookie-jar cookies.txt https://example.com -O

curl --cookie cookies.txt https://example.com

curl --resolve www.example.com:80:localhost https://www.example.com/

curl --limit-rate 100K https://example.com/yourfile.tar.gz -O

Утилита lsof (List of Opened Files) позволяет узнать, кто использует файл или ресурс в Linux. 

$ lsof /dev/null

COMMAND    PID    USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
systemd   1480  user     0r   CHR    1,3      0t0    6 /dev/null
sh        1501  user     1w   CHR    1,3      0t0    6 /dev/null

$ lsof -u username

COMMAND    PID    USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
systemd   1480 merionet  cwd    DIR    8,3     4096     2 /

$ sudo lsof -i TCP:80

COMMAND  PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
httpd    903   root    4u  IPv6  20222      0t0  TCP *:http (LISTEN)

$ man lsof