Debian 12 Bookworm with Zoneminder 1.36.x and 1.37.x
Debian 9 with Zoneminder 1.30.0
04MAR17 Zoneminder has been pulled from Debian 9 because of a reported vulnerability. Actually this was caused by the install procedure and not Zoneminder itself. Am working to get the package reinstated. Alternative install procedure provided below.
This procedure fixes the directory browse vulnerability.
Use Debian 9 net install CD. Install only: web server, SSH server and standard system utilities from tasksel
Login and become root (su root) or prepend sudo to the following commands
If needed check to make sure you are up to date
apt update apt upgrade apt dist-upgrade
Install additional LAMP components (Mariadb server recommended)
apt install php mariadb-server php-mysql apache2-mod-php7.0
Secure Mariadb, create root password et. al.
mysql_secure_installation
Or to install MySQL Server
apt install php default-mysql-server php-mysql apache2-mod-php7.0
Install Zoneminder
apt install zoneminder
Alternative install procedure.
Download the Zoneminder packages: https://packages.debian.org/unstable/zoneminder and https://packages.debian.org/unstable/zoneminder-doc
Install Zoneminder
dpkg -i zoneminder_1.30.0+dfsg-2_amd64.deb dpkg -i zoneminder-doc_1.30.0+dfsg-2_all.deb
You will get install errors about dependences not met. Fix with:
apt install -f
Create Zoneminder database in MySQL (Note: this also creates the default Zoneminder user and permissions in MySQL)
mysql -uroot -p < /usr/share/zoneminder/db/zm_create.sql
mysql -uroot -p -e "grant all on zm.* to 'zmuser'@localhost identified by 'zmpass';"
mysqladmin -uroot -p reload
Set permissions of /etc/zm/zm.conf to root:www-data 740
chmod 740 /etc/zm/zm.conf
chown root:www-data /etc/zm/zm.conf
Enable Zoneminder service to start at boot
systemctl enable zoneminder.service
Add www-data to the sudo group (to enable use of local video devices)
adduser www-data video
Start Zoneminder
systemctl start zoneminder.service
Check to see that Zoneminder is running
systemctl status zoneminder.service
Enable CGI and Zoneminder configuration in Apache.
a2enmod cgi
a2enmod rewrite
a2enconf zoneminder
Add timezone to PHP
nano /etc/php/7.0/apache2/php.ini
Search for [Date] (Ctrl + w then type Date and press Enter) and make changes as follows for your time zone. Be sure to remove the ; before date.timezone
[Date] ; Defines the default timezone used by the date functions ; http://php.net/date.timezone date.timezone = America/New_York
Ctrl+o Enter to save
CTRL+x to exit
Change permissions in /usr/share/zoneminder/
chown -R www-data:www-data /usr/share/zoneminder/
Note: the following edit fixes the expose directory "vulnerability."
Edit zoneminder.conf Note: The following changes may be in the file.
nano /etc/apache2/conf-available/zoneminder.conf
Add a - before Indexes and a + before FollowSymLinks as shown
<Directory /usr/share/zoneminder/www> Options -Indexes +FollowSymLinks
Make sure the following is at the bottom of the file
<Directory /usr/share/zoneminder/www/api>
AllowOverride All
</Directory>
Ctrl+o Enter to save
CTRL+x to exit
Restart Apache
service apache2 restart
