Version 6.6 319 October 2014
Installation & Operation Manual 33. Configuring Security Settings
Table 33-2: Filesystem Integrity Configuration Parameters of the Media Gateway
Parameter Name Type Provisioning Type Description
Integrity Check Time String
in HH:MM format
Instant Time of the day when
File System Integrity
Check is performed
daily. Format is HH:MM
(24-hour clock). Default
value is 2:00
(corresponds to 2:00
AM).
33.8.3 Restoring File System Integrity
When File System Integrity is violated, approach the corresponding SC board and
restore the integrity via one of the following options:
Unnecessary new files must be deleted.
Necessary new files must be "acknowledged" as described below.
Changed files may be restored from the backup or copied from the
uncompromised SC board. Following this, they must be "acknowledged" as
described below.
Deleted files may be restored from the backup or copied from the
uncompromised SC board. After completing either of these options, you must
"acknowledge" the file deletion by providing the directory name to the tools fs
ack command (see below).
When modified files are acknowledged, they are added to the File System snapshot.
Acknowledged files are later removed from File System Integrity Check reports,
unless further modifications are detected. When all compromised files are
acknowledged, File System Integrity Status displays OK.
To acknowledge changed files:
1. Connect to the CLI interface on the specific SC board. For more information, see
Section 'The Command Line Interface (CLI)' on page 107.
2. Login as root user. For more information, see Section 'Logging in as a Root User'
on page 115.
3. Review all compromised files. Remove malicious modifications from the files by
restoring them from the backup or copying them from the uncompromised SC
board. Delete all new and unneeded files.
4. For each file fixed in the previous step, at the prompt type tools fs ack
<filename> and press Enter.
client238::~# tools fs ack /etc/hosts
client238::~# tools fs ack /etc/hosts.old