前回、CentOS 7にF-Secure Linux Security 11.10をインストールしました。
今回はF-Secure Linux Security 11.10にHotfix 8を適用を適用してみました。
F-Secure Linux Security 11.XX Hotfix 8 Feb 27, 2019
https://www.f-secure.com/en/business/downloads/linux-security
上記サイトのダウンロードリンクからHotfix 8を取得しようとしたらダメでした。
https://download.f-secure.com/corpro/ls-new/ls11.10/fsls-11-hf8.tar.gz
調べたら下記pdfに記載のダウンロードリンクからダウンロードできました。
https://www.f-secure.com/documents/894659/928001/ls11-hf8.pdf
ホットフィックス 8 ダウンロード URL
https://download.f-secure.com/corpro/ls/current/fsls-11-hf8.tar.gz
- ダウンロード
- 解凍
- インストール
- バージョン確認
|
1 2 3 4 |
# curl -O https://download.f-secure.com/corpro/ls/current/fsls-11-hf8.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 176M 100 176M 0 0 7096k 0 0:00:25 0:00:25 --:--:-- 7716k |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 |
# tar xvfz fsls-11-hf8.tar.gz fsls-11-hf8/ fsls-11-hf8/11.00/ fsls-11-hf8/11.00/fsoasd fsls-11-hf8/11.00/fsav fsls-11-hf8/11.00/AboutScreen.class fsls-11-hf8/fsls-11-hf8.sh fsls-11-hf8/11.xx/ fsls-11-hf8/11.xx/f-secure-jre-1.8.0.201-1.i586.rpm fsls-11-hf8/11.xx/f-secure-postgresql-9.4.19-32.i386.rpm fsls-11-hf8/11.xx/f-secure-jre-1.8.0.201-1.x86_64.rpm fsls-11-hf8/11.xx/f-secure-automatic-update-agent-9.03.15-1.i386.rpm fsls-11-hf8/11.xx/fsupdated.rc fsls-11-hf8/11.xx/postgre.sh fsls-11-hf8/11.xx/fsls-upgrade-jre.sh fsls-11-hf8/11.xx/rpm.sh fsls-11-hf8/11.xx/tomcat.sh fsls-11-hf8/11.xx/apache-tomcat-7.0.90.tar.gz fsls-11-hf8/fslocalui fsls-11-hf8/fsls-11-hf8-readme.txt fsls-11-hf8/11.10/ fsls-11-hf8/11.10/fsaccd-x86_64 fsls-11-hf8/11.10/fsaccd-x86 fsls-11-hf8/11.10/fsoasd fsls-11-hf8/11.10/fsoasd_th fsls-11-hf8/11.10/fsav fsls-11-hf8/11.10/fsoasd_bh fsls-11-hf8/11.10/fsav-compile-drivers fsls-11-hf8/BUILD |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 |
# cd fsls-11-hf8 # ls -l 合計 28 drwxrwxr-x 2 501 501 54 1月 17 2019 11.00 drwxrwxr-x 2 501 501 126 2月 16 2019 11.10 drwxrwxr-x 2 501 501 4096 2月 16 2019 11.xx -rw-rw-r-- 1 501 501 1 2月 16 2019 BUILD -rwxrwxr-x 1 501 501 1742 1月 17 2019 fslocalui -rwxrwxr-x 1 501 501 5648 2月 14 2019 fsls-11-hf8-readme.txt -rwxrwxr-x 1 501 501 4561 2月 16 2019 fsls-11-hf8.sh # ./fsls-11-hf8.sh Updating /opt/f-secure/fssp/bin/fsav ... Updating /opt/f-secure/fssp/libexec/fsupdated.rc ... Updating /opt/f-secure/fsav/bin/fsav-compile-drivers ... Stopping FSMA modules Stopping F-Secure Alert Database Handler Daemon (/opt/f-secure/fsav/libexec/fsadhd.stop) as fsma Stopping F-Secure FSAV On-Access Scanner Daemon (/opt/f-secure/fsav/libexec/fsoasd.stop) as root Stopping F-Secure Database Update Daemon () as root Stopping F-Secure FSAV Web UI (/opt/f-secure/fsav/tomcat/bin/fs-shutdown.sh -force) as root Stopping F-Secure FSAV PostgreSQL daemon (/opt/f-secure/common/postgresql/bin/shutdown.sh) as fsma Stopping F-Secure Management Agent Updating /opt/f-secure/fsav/libexec/fsaccd-x86 ... Updating /opt/f-secure/fsav/libexec/fsaccd-x86_64 ... Updating /opt/f-secure/fsav/libexec/fsoasd_th ... Updating /opt/f-secure/fsav/libexec/fsoasd_bh ... Updating /opt/f-secure/fsav/sbin/fsoasd ... Upgrading PostgreSQL to 9.4.19 pg_ctl: PID file "/var/opt/f-secure/common/postgresql/data/postmaster.pid" does not exist Is server running? local ui disabled remote ui enabled Starting F-Secure Management Agent (running as fsma user) Starting FSMA modules Starting F-Secure Alert Database Handler Daemon (/opt/f-secure/fsav/sbin/fsadhd) as fsma Starting F-Secure FSAV Policy Manager Daemon (/opt/f-secure/fsav/bin/fsavpmd) as root Starting F-Secure Firewall Daemon (/opt/f-secure/fsav/bin/fsfwd.run) as root Starting F-Secure FSAV License Alerter (/opt/f-secure/fsav/libexec/fslmalerter) as root Starting F-Secure FSAV On-Access Scanner Daemon (/opt/f-secure/fsav/sbin/fsoasd) as root Starting F-Secure FSAV Status Daemon (/opt/f-secure/fsav/bin/fstatusd) as root Starting F-Secure Database Update Daemon (/opt/f-secure/fssp/libexec/fsupdated.rc start) as root Starting F-Secure FSAV Web UI (/opt/f-secure/fsav/tomcat/bin/fs-catalina.sh start) as root Starting F-Secure FSAV PostgreSQL daemon (/opt/f-secure/common/postgresql/bin/startup.sh) as fsma Stopping Tomcat... Updating /opt/f-secure/fsav/ABOUT ... Updating /opt/f-secure/fsav/fsav-config ... Updating /opt/f-secure/fsav/bin/uninstall-fsav ... Upgrading JRE... Backing up /opt/f-secure/fsav/tomcat to /opt/f-secure/fsav/tomcat-7.0.55 (excluding logs) Upgrading /opt/f-secure/fsav/tomcat to 7.0.90 Starting Tomcat... Shutting down F-Secure Automatic Update Agent: [ OK ] Starting F-Secure Automatic Update Agent: [ OK ] Upgrade successful |
メッセージを確認したら「local ui disabled」と表示されています。
https://download.f-secure.com/corpro/ls/current/fsls-11-hf8-readme.txt
に記載がありました。ローカルWeb UIが無効になるから、有効にするならnolocalloginの指定が必要と。
4. Installation
Run the following command as root:
./fsls-11-hf8.sh
Important note: for improved security the above command disables the local
web user interface (listening on port 28080) if it can be accessed without
login. If you don’t want this to happen, run the installer as follows
instead:./fsls-11-hf8.sh nolocallogin
During upgrade, the Tomcat Web UI service will be stopped and restarted when
finished successfully. If the hotfix fails to apply due to customized product
バージョンが11.10 build 68から11.10 build 68 hotfix 8になりました。
