ksenz

git clone https://github.com/krobicon/ksenz git pull

OPEN MAIN DIR

cd ~/ksenz

ENABLE BUILD

chmod +x service-build.sh

RUN BUILD

./service-build.sh

OPEN BIN

cd ~/ksenz/bin

INSTALL IN BIN

./service-install.sh

UNINSTALL IN BIN

./service-uninstall.sh

Installation

This guide is written for Ubuntu. For other Linux flavors, adapt commands where needed.

(1) Allow Root Login

We'll ensure that the root user can login.

Configure your root user password:

sudo passwd

See this page for more information on the root user.

(2) Enable Process Isolation

We'll ensure that non-root users are unable to see the project-ksenz service.

Switch to the root user:

su

Install dependencies:

apt install -y vim

Open /etc/fstab with vim:

vim /etc/fstab

Add the following line:

proc /proc proc defaults,nosuid,nodev,noexec,relatime,hidepid=1 0 0

Reboot your system:

reboot

Check that your non-root user cannot see root processes:

ps aux

See this page for more information on process isolation.

(3) Disable Process Tracing

We'll ensure that non-root users cannot use ptrace capabilities.

Switch to the root user:

su

Open /etc/sysctl.d/10-ptrace.conf with vim:

vim /etc/sysctl.d/10-ptrace.conf

Change the kernel.yama.ptrace_scope value to 2:

kernel.yama.ptrace_scope = 2

Reboot your system:

reboot

Check that the ptrace_scope is set to 2:

sysctl kernel.yama.ptrace_scope

See this page for more information on process tracing.

(4) Install .NET

We'll ensure that project-ksenz can be compiled with .NET.

Switch to the root user:

su

Add the Microsoft package repositories:

See https://docs.microsoft.com/en-us/dotnet/core/install/linux.
Be sure to carefully follow instructions for your Linux flavor.

Install .NET 6.0:

apt update && apt install -y dotnet-sdk-6.0

(5) Build Service

We'll build project-ksenz, so we can register it as a service:

Switch to root user:

su

Open the /root directory:

cd ~

Install dependencies:

apt install -y git

krobicon / ksenz