FreeBSD equivalent of LMD/Linux Malware Detect?

@lbutlr kremels at kreme.com
Fri Feb 21 17:06:02 UTC 2020


On 21 Feb 2020, at 07:37, Özgür Kazancci <ozgur at kazancci.com> wrote:
> It *somehow* works on FreeBSD 10/11, but not on 12 at all.

How does it not work? It installs just fine under 12.1 and the scripts execute.

 root at mail ./install.sh
./install.sh: line 48: chattr: command not found
Linux Malware Detect v1.6.4
            (C) 2002-2019, R-fx Networks <proj at r-fx.org>
            (C) 2019, Ryan MacDonald <ryan at r-fx.org>
This program may be freely redistributed under the terms of the GNU GPL

installation completed to /usr/local/maldetect
config file: /usr/local/maldetect/conf.maldet
exec file: /usr/local/maldetect/maldet
exec link: /usr/local/sbin/maldet
exec link: /usr/local/sbin/lmd
cron.daily: /etc/cron.daily/maldet
imported config options from /usr/local/maldetect.last/conf.maldet
maldet(22068): {sigup} performing signature update check...
maldet(22068): {sigup} could not determine signature version
maldet(22068): {sigup} signature files missing or corrupted, forcing update...
maldet(22068): {sigup} new signature set 202002198018 available
maldet(22068): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
maldet(22068): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
maldet(22068): {sigup} verified md5sum of maldet-sigpack.tgz
maldet(22068): {sigup} unpacked and installed maldet-sigpack.tgz
maldet(22068): {sigup} verified md5sum of maldet-clean.tgz
maldet(22068): {sigup} unpacked and installed maldet-clean.tgz
maldet(22068): {sigup} signature set update completed
maldet(22068): {sigup} 17027 signatures (14207 MD5 | 2035 HEX | 785 YARA | 0 USER)

 root at mail # /usr/local/maldetect/maldet
Linux Malware Detect v1.6.4
            (C) 2002-2019, R-fx Networks <proj at rfxn.com>
            (C) 2019, Ryan MacDonald <ryan at rfxn.com>
This program may be freely redistributed under the terms of the GNU GPL v2

signature set: 202002198018
usage maldet [-h|--help] [-a|--scan-all PATH] [-r|--scan-recent PATH DAYS]
      [-f|--file-list PATH] [-i|--include-regex] [-x|--exclude-regex]
      [-b|--background] [-m|--monitor] [-k|--kill-monitor] [-c|--checkout]
      [-q|--quarantine] [-s|--restore] [-n|--clean] [-l|--log] [-e|--report]
      [-u|--update-sigs] [-d|--update-ver]



More information about the freebsd-questions mailing list