Fedora 36 : Rootkit Hunter tool.

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD..., see wikipedia .

You can find it on this website.

On Fedora 36 you can search and install with the DNF tool.

[root@fedora mythcat]# dnf search rkhunter
Last metadata expiration check: 3:38:34 ago on Sat 06 Aug 2022 10:35:34 AM EEST.
======================== Name Exactly Matched: rkhunter ========================
rkhunter.noarch : A host-based tool to scan for rootkits, backdoors and local exploits
[root@fedora mythcat]# dnf install rkhunter.noarch
Last metadata expiration check: 3:39:00 ago on Sat 06 Aug 2022 10:35:34 AM EEST.

The first step is to upgrade it and then you can check the system.

[root@fedora mythcat]# rkhunter --propupd
[ Rootkit Hunter version 1.4.6 ]
File created: searched for 179 files, found 139

[root@fedora mythcat]# rkhunter --check
[ Rootkit Hunter version 1.4.6 ]

Checking system commands...

  Performing 'strings' command checks

...

The result can be found on the log file and you can set settings on the conf file type.

[root@fedora mythcat]# vi /var/log/rkhunter/rkhunter.log
[root@fedora mythcat]# vi /etc/rkhunter.conf

Fedora 36 : The zeek tool.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Use the DNF tool to add repo for zeek tool:

[root@fedora home]# dnf config-manager --add-repo https://download.opensuse.org/repositories/security:zeek/Fedora_36/security:zeek.repo

Adding repo from: https://download.opensuse.org/repositories/security:zeek/Fedora_36/security:zeek.repo

Use DNF tool to install

[root@fedora home]# dnf install zeek-lts
The Zeek Network Security Monitor. (Fedora_36)   18 kB/s |  77 kB     00:04    
Last metadata expiration check: 0:00:02 ago on Sat 11 Jun 2022 12:33:29 AM EEST.
Dependencies resolved.
================================================================================
 Package                    Arch     Version              Repository       Size
================================================================================
Installing:
 zeek-lts                   x86_64   4.0.7-1.1            security_zeek   7.9 k
Installing dependencies:
 libbroker-lts-devel        x86_64   4.0.7-1.1            security_zeek   1.3 M
 libpcap-devel              x86_64   14:1.10.1-3.fc36     fedora          141 k
 python3-GitPython          noarch   3.1.26-1.fc36        fedora          275 k
 python3-gitdb              noarch   4.0.9-2.fc36         fedora          107 k
 python3-semantic_version   noarch   2.8.4-9.fc36         fedora           39 k
 python3-smmap              noarch   5.0.0-1.fc36         fedora           46 k
 zeek-lts-btest             x86_64   4.0.7-1.1            security_zeek   326 k
 zeek-lts-core              x86_64   4.0.7-1.1            security_zeek   4.8 M
 zeek-lts-devel             x86_64   4.0.7-1.1            security_zeek   957 k
 zeek-lts-libcaf-devel      x86_64   4.0.7-1.1            security_zeek   1.6 M
 zeek-lts-zkg               x86_64   4.0.7-1.1            security_zeek    50 k
 zeekctl-lts                x86_64   4.0.7-1.1            security_zeek   1.8 M

Transaction Summary
================================================================================
Install  13 Packages

Total download size: 11 M
Installed size: 57 M
Is this ok [y/N]:y
Downloading Packages:
(1/13): python3-gitdb-4.0.9-2.fc36.noarch.rpm   232 kB/s | 107 kB     00:00    


Complete!

Create a script file named main.zeek:

event zeek_init()
        {
        print "Hello, World!";
        }

event zeek_done()
        {
        print "Goodbye, World!";
        }

... and run this file:

[mythcat@fedora ~]$ /opt/zeek/bin/zeek main.zeek
Hello, World!
Goodbye, World!

Fedora 36 : Fill out this survey for a badge.

I've always liked Fedora distro because it applies a concept of interactivity between developers and users.

Even if not everything works, you can see the progress made from the older versions.

Today I completed my feedback in a survey requested by them and I also got a small badget for my effort.

You can find it on this webpage.

Fedora 36 : Inkscape 1.2 with Huion WH 1409 graphic tablet.

In this tutorial I will show you how to install and use the Huion WH 1409 graphics tablet with the new release of Inkscape 1.2 software.

You will need to use the DKMS feature of the kernel and the tablet-specific drivers.

Let's start with the following command to get the driver and show the files:

[root@fedora mythcat]# git clone https://github.com/DIGImend/digimend-kernel-drivers.git
Cloning into 'digimend-kernel-drivers'...
remote: Enumerating objects: 1475, done.
remote: Counting objects: 100% (26/26), done.
remote: Compressing objects: 100% (19/19), done.
remote: Total 1475 (delta 9), reused 15 (delta 7), pack-reused 1449
Receiving objects: 100% (1475/1475), 447.25 KiB | 1.66 MiB/s, done.
Resolving deltas: 100% (969/969), done.
[root@fedora mythcat]# cd digimend-kernel-drivers/
[root@fedora digimend-kernel-drivers]# dir
compat.h    dracut.conf        hid-uclogic-params.c  README.md
COPYING        hid-ids.h        hid-uclogic-params.h  udev.rules
debian        hid-kye.c        hid-uclogic-rdesc.c   usbhid
depmod.conf    hid-polostar.c        hid-uclogic-rdesc.h   xorg.conf
digimend-debug    hid-rebind        hid-viewsonic.c
dkms.conf    hid-uclogic-core.c  Makefile

Let's create it using the command

[root@fedora digimend-kernel-drivers]# make dkms_install
...

dkms add .
Creating symlink /var/lib/dkms/digimend/11/source -> /usr/src/digimend-11
dkms build digimend/11

Building module:
cleaning build area...
make -j1 KERNELRELEASE=5.17.9-300.fc36.x86_64 KVERSION=5.17.9-300.fc36.x86_64...
...

Let's check and reboot.

[root@fedora digimend-kernel-drivers]# dkms status
digimend/11, 5.17.9-300.fc36.x86_64, x86_64: installed (original_module exists)
[root@fedora digimend-kernel-drivers]# reboot

After rebooting the diver must be activated and you will see that Linux responds to the movement of the tablet pen.

[root@fedora mythcat]# modprobe -r hid-kye hid-uclogic hid-viewsonic

Install the latest version of inkscape 1.2 using the DNF utility.

Start the inkscape software:

[mythcat@fedora ~]$ inkscape
static bool Inkscape::UI::Dialog::DialogContainer::recreate_dialogs_from_state(InkscapeWindow*, const Glib::KeyFile*): Key
file does not have group “Windows”
Gdk-Message: 15:09:10.534: Error flushing display: Broken pipe

It seems that inkscape does not detect and set the tablet if you use the settings of this software, but you can use the tablet with this software even if you do not set it.

Fedora 36 : Install django-hypergen and test it.

Today I test the last version of python version 3.11.0a7 with the Django-hypergen example.

The install process can be found on the GitHub page project.

You can see the full tutorial here.

News: Firefox 100 on Fedora distro.

This new release can download it and read more on the official webpage.

I tested today and as you can see this is working well:

Fedora 36 : Use the ykman tool - part 001.

You can see a full tutorial about how can install this linux tool for yubikey device on this tutorial.

The next command will program a random 38 character long static password to slot 1 on the device:

# ykman otp static 1 --generate --length 38 --force --keyboard-layout US

News: Fedora 36 beta released.

Fedora 36 beta was released and I tested it today.

First of all, Fedora 36 is still in pre-release mode and you should be careful to back up your data before upgrading it has a rollback option just in case.

I haven't seen any significant differences in browsing, and overall it seems faster.

The upgrade commands are the same but the installation process seems more complex.

# dnf upgrade --refresh
# dnf autoremove
# dnf install dnf-plugin-system-upgrade -y
# dnf system-upgrade download --releasever=36 --allowerasing
# dnf system-upgrade reboot
# cat /etc/os-release 

Let's fix the install process:

# dnf system-upgrade clean
# symlinks -r -d /usr 

This is ascreenshot take on my HP Compaq 6710b laptop, you can see the Workstation Edition Prerelease.