[Linux] 리눅스 백신프로그램 설치 - McAfee

일반적으로 리눅스 Server에는 악성코드가 감염되기는 어렵다고 알고있습니다. Windows와 달리 리눅스는 다중 사용자용 운영체제이고, 권한 설정이 매우 엄격하여 root 권한을 쓰지 않는 한 바이러스가 침투하기 어렵다고 인식되어 왔습니다. 하지만 2017년 웹호스팅 업체 '인터넷나야나' 랜섬웨어 감염사태로 인하여 Linux Server에 대한 보안대책에도 관심이 많아져왔습니다.

 

 

Linux Server에서 McAfee 에이전트를 설치해보도록 하겠습니다.
Mcafee_agentPackages.zip 파일을 리눅스 서버 폴더에 옮기고 난후에

root@test agentPackages]# ./install.sh -i
space required to copy archive is 88764760 bytes
space available at mfejqeobz is 43396136960 bytes
extracting archive to mfejqeobz... please wait
86445+1 records in
86445+1 records out
44260026 bytes (44 MB) copied, 0.204853 s, 216 MB/s
Archive:  mfejqeobz/package.zip
  inflating: mfejqeobz/MFEma.x86_64.rpm
  inflating: mfejqeobz/MFErt.i686.rpm
  inflating: mfejqeobz/MFEma.i686.rpm
  inflating: mfejqeobz/DXL.zip
  inflating: mfejqeobz/MFEma.x86_64.deb
  inflating: mfejqeobz/MFErt.i686.deb
  inflating: mfejqeobz/MFEma.i686.deb
  inflating: mfejqeobz/reqseckey.bin
  inflating: mfejqeobz/srpubkey.bin
  inflating: mfejqeobz/sitelist.xml
  inflating: mfejqeobz/req2048seckey.bin
  inflating: mfejqeobz/sr2048pubkey.bin
  inflating: mfejqeobz/agentfipsmode
  inflating: mfejqeobz/agent.ini
  inflating: mfejqeobz/RepoKeys.ini
  inflating: mfejqeobz/contrib.ini
Preparing...                ########################################### [100%]
Available space : 42291284 KB
Required size   : 6144 KB
   1:MFErt                  ########################################### [100%]
Writing conf file ...
Updating linker cache ...
Runtime installed successfully
Preparing...                ########################################### [100%]
Available space : 42287680 KB
Required size   : 29696 KB
Creating user(mfe) and group (mfe)
   1:MFEcma                 ########################################### [100%]
Registering the start up script...
Trying registering with systemd
Trying registering with SysV approach
Updating linker cache...
MA Siteinfo Path /var/McAfee/agent/keydata
ma config command params:  -provision -managed -dir /var/McAfee/agent/keydata -nostart
starting ma service...

Starting McAfee Agent services...                            [ OK ]
Starting McAfee common services...                           [ OK ]
Starting McAfee Agent compat service.                        [ OK ]

Starting dependent services...
MA health check cron job registered
Agent Successfully Installed
installing client extensions from : /usr/local/etc/agentPackages/mfejqeobz mfejqeobz
Product count is : 1
Product is : DXL.zip
Calling mcupdater : location : /usr/local/etc/agentPackages/mfejqeobz
McAfee compat service is already running.
Stopping McAfee compat services...                           [ OK ]

McAfee common services is already running.
Stopping McAfee common services...                           [ OK ]

McAfee agent service is already running.
Stopping McAfee Agent services...                            [ OK ]


Starting McAfee Agent services...                            [ OK ]
Starting McAfee common services...                           [ OK ]
Starting McAfee Agent compat service.                        [ OK ]

[root@test agentPackages]

 

정상적으로 설치가 완료되었습니다.
설치는 완료되었지만 McAfee가 정상적으로 동작이 되고 있는지 확인해보도록 하겠습니다.

 

---

 

프로세스 확인

[root@test logs]# cd /etc/init.d
[root@test init.d]# ./ma status

McAfee agent service is already running.
McAfee common services is already running.
McAfee compat service is already running.

[root@test init.d]#

 

Log 확인

[root@test /]# cd var/McAfee/agent/logs/
[root@test logs]# ll
total 8312
-rw-r--r--. 1 mfe  mfe  1504491 Jun  4 05:41 macmnsvc_test.log
-rw-r--r--. 1 root root 1023893 Jun  4 05:41 macompatsvc_test.log
-rw-r--r--. 1 root root 1665503 Jun  4 05:42 masvc_test.log
-rw-r--r--. 1 root root  811484 Jun  4 00:19 McScript.log
[root@test logs]#

 

logs 폴더에 정상적으로 로그가 쌓이고 있는 것을 확인 가능합니다.