Install ChkRootKit

chkrootkit (Check Rootkit) is a common script used in linux servers, intended to help system administrators. Check their system for known rootkits

You can install ChkRootKit by following the below shown steps.

cd /usr/local/src/

– Down load the chkrootkit.
# wget http://www.spenneberg.org/chkrootkit-mirror/files/chkrootkit.tar.gz
# wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz

– Unpack the chkrootkit you just downloaded.
# tar -xvzf chkrootkit.tar.gz

– Change to new directory
# cd chkrootkit-*
(select the version )

– Compile chkrootkit
# make sense

– Run chkrootkit
# ./chkrootkit

How to setup a daily scan report?

– Load crontab
# crontab -e

– Add this line to the top:

*************************
0 1 * * * (cd /usr/local/src/chkrootkit*; ./chkrootkit 2>&1 | mail -s “chkrootkit output” email@domain.com)
*************************

Revisions

There are no revisions for this post.

Tags: , ,

No comments yet.

Leave a Reply