Security warning - tampered files after installing most recent freepbx17 update from repository

FreePBX Security
, ,
1

Dear community,

two day ago I have installed all modules and system updates available for debian/freepbx17.
The freepbx17-package (and one more) was hold back. So installed with “apt install freepbx17”

After that I’ve installed two modules manually: dahdi and “synology active backup for business” becauce the module admin module complained about missing upgrades.

Now I have the folloing problems (lucky enough I have a spare freepbx):
-Incomming calls end in nirvana
-Outgoing calls show the trunk number, but no individual CIDs.
-Outgoing calls are signaled, but talking is not possible.
-I get a security warning:

You have 76 tampered files
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/custom-theme/images/ui-bg_flat_0_999999_40x100.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/custom-theme/images/ui-icons_428bca_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/custom-theme/images/ui-icons_555555_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/custom-theme/images/ui-icons_999999_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/custom-theme/images/ui-icons_f0ad4e_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/images/ui-bg_flat_0_999999_40x100.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/images/ui-icons_428bca_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/images/ui-icons_444444_256x240.png altered”
Module: “FreePBX Framework”, File: “/var/www/html/admin/assets/css/images/ui-icons_555555_256x240.png altered”
…

-I do get warings from the dahdi-module

File /etc/dahdi/modules does not exist.
File /etc/dahdi/system.conf does not exist.
File /etc/modprobe.d/dahdi.conf does not exist.

-I’ve checked with the validation-script from http://mirror1.freepbx.org/validate.phar.gz

root@FreePBX:~# ls
validate.phar.gz
root@FreePBX:~# gzip -d validate.phar.gz
root@FreePBX:~# php validate.phar
— INFO —
±-------------------------------------------------------------------------------------------+
| This script will check your system to the best of it’s ability. |
| It should not be relied upon for complete validation. |
| Every hack is different. This just tries to discover and clean them up as best as possible.|
±-------------------------------------------------------------------------------------------+

Continue with this action? (y/n) y
Scanning Framework
[============================] < 1 sec
Error validating /var/www/html/admin/assets/css/custom-theme/images/ui-bg_flat_0_999999_40x100.png!
The framework module HAS BEEN TAMPERED!

As of time of writing, no more updates/bugfixes are available.

Does anybody has an idea what happened here and how to get out of it?
Should a consider to wipe out the debian/freepbx-system and reinstall it from scratch?

Thanks for reading
Martin

2

Yes, this package is held back intentionally. Once you install from apt initially, from then on, FreePBX is updated using the module admin or fwconsole ma command line tool. So you should not force an apt install of freepbx after initial installation.

fwconsole ma refreshsignatures should find the broken modules and redownload and install them.

1 Like
3

Hi Bill,
thanks a lot. Now all the warnings in the dashboard are gone but the dahdi-modules.

-I do get warings from the dahdi-module

File /etc/dahdi/modules does not exist.
File /etc/dahdi/system.conf does not exist.
File /etc/modprobe.d/dahdi.conf does not exist.

Thanks
Martin

4

fwconsole ma install dahdiconfig should create those files.

You may need to fwconsole chown first.

2 Likes
5

Hi Bill,
this fixed the dahdi-errors thanks.

Still, the freepbx does not work properly:
-Outgoing calls are possible, but the trunk-number is signaled, not the extension numer (CID)
-Incomming calls are not connected. The inhouse phones do not ring. The caller hears no sound.

Both worked fine before the upgrade.

Checking via the GUI, I have seen that in the old/working setting in the extension module CW and FM/FM was enabled on many/nearly all extensions. In the new/faulty setting CW and FM/FM is disabled.

So some of the configuration was lost while updating the pbx.

I could try to restore the settings from the last working configuration backup.

(Maybe this should be handled in a new thread?)

Thanks,
Martin

6

I’ve restored the configuration from backup.
The FreePBX works fine now.

Thank you Bill,

Martin

7

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.