sudo required now even to do --newKey

main
Robert 7 months ago
parent d885bbc677
commit 65ebd1142b
  1. 6
      README.md
  2. 8
      vscan_bins.sh

@ -6,13 +6,13 @@ Beaware it is possible to lock your self out of your own system with this progra
Please look at the go code, etc...
## If LOCKED OUT:
Boot into a Linux Live USB disk. Then mount your hard drive, open the folder to etc, right click and open in new Terminal. From the etc folder... change directory to systemd/system. Make sure that --init is turned on...once recovered and loaded all normal programs, so they are added to the allowed system Database, you may remove the --init to go back to enforce mode...
Boot into some form of Recovery Mode: Boot into a Linux Live USB disk. Then mount your hard drive, open the folder to etc, right click and open in new Terminal. From the etc folder... change directory to systemd/system. Make sure that --init is turned on...once recovered and loaded all normal programs, so they are added to the allowed system Database, you may remove the --init to go back to enforce mode...
```
cd systemd/system/
sudo nano execguard.service
ExecStart=/usr/local/bin/execguard --init
# If, the program still does not work: sudo rm execguard.service
# If, the program still does not work: sudo rm /etc/systemd/system/execguard.service
reboot
```
### About execgaurd --init
@ -25,7 +25,7 @@ NOTE: All executables are blocked that are not in the allowed.db, so the protect
## Make a key for xxtea
This will generate a new key phrase for you that is safe in size...to be placed inside of your config.json file. Do this before you go live.
```
execguard --newKey
sudo execguard --newKey
```
## /etc/execgaurd/config.json

@ -5,5 +5,9 @@ if [ ! -x /usr/bin/clamscan ]; then
sudo apt install clamav clamav-daemon clamav-freshclam
sudo freshclam
fi
sudo sqlite3 /etc/execguard/system.db "SELECT path FROM allowed;" > migrated_apps.txt
clamscan -v --file-list=migrated_apps.txt
if [ ! -x /usr/bin/sqlite3 ]; then
sudo apt install sqlite3
fi
sudo sqlite3 /etc/execguard/system.db "SELECT path FROM allowed;" > my_bins_apps.txt
clamscan -v --file-list=my_bins_apps.txt
echo "Done -- you may: rm my_bins_apps"

Loading…
Cancel
Save