Koozali.org: home of the SME Server

rootkit as a cronjob

Offline funkusmunkus

  • *
  • 220
  • +0/-0
rootkit as a cronjob
« on: August 10, 2004, 08:08:40 AM »
Hey all,

I came across this
Quote

Add a file named chkrootkit to /etc/cron.daily/

vi /etc/cron.daily/chkrootkit

In the file type the following...

#!/bin/bash
/fullpath/chkrootkit-pre-0.36/./chkrootkit -q | mail -s "Daily chkrootkit Output" you@yourdomain.com

Then save the file, chmod 755.

now insted of putting in (/fullpath/chkrootkit-pre-0.36/./chkrootkit) won't just rkhunter do the job? why would i have to put the whole path.
oh did i mention that i'm kind of a noob to linux, so go easy on me :)

Cheers
.........

mbachmann

rootkit as a cronjob
« Reply #1 on: August 10, 2004, 12:00:22 PM »
rkhunter --cronjob will suffice.

Forget the rest.

Offline funkusmunkus

  • *
  • 220
  • +0/-0
rootkit as a cronjob
« Reply #2 on: August 10, 2004, 01:34:15 PM »
yeah but how do i know if it found something, wouldn't i need some sort of report to check up on, so i thought the email idea would be good
.........

Offline MasterSleepy

  • *
  • 386
  • +0/-0
    • http://www.vanhees.cc
rootkit as a cronjob
« Reply #3 on: August 10, 2004, 01:41:55 PM »
Hello,

For your information, take a look at http://www.chkrootkit.org/ in FAQ section question 9.

Regards.

mbachmann

rootkit as a cronjob
« Reply #4 on: August 10, 2004, 02:18:42 PM »
it will sent email once a week.