Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: funkusmunkus on August 10, 2004, 08:08:40 AM

Title: rootkit as a cronjob
Post by: funkusmunkus on August 10, 2004, 08:08:40 AM

Hey all,

I came across this

Quote

Add a file named chkrootkit to /etc/cron.daily/

vi /etc/cron.daily/chkrootkit

In the file type the following...

#!/bin/bash
/fullpath/chkrootkit-pre-0.36/./chkrootkit -q | mail -s "Daily chkrootkit Output" you@yourdomain.com

Then save the file, chmod 755.

now insted of putting in (/fullpath/chkrootkit-pre-0.36/./chkrootkit) won't just rkhunter do the job? why would i have to put the whole path.
oh did i mention that i'm kind of a noob to linux, so go easy on me :)

Cheers

Title: rootkit as a cronjob
Post by: mbachmann on August 10, 2004, 12:00:22 PM

rkhunter --cronjob will suffice.

Forget the rest.

Title: rootkit as a cronjob
Post by: funkusmunkus on August 10, 2004, 01:34:15 PM

yeah but how do i know if it found something, wouldn't i need some sort of report to check up on, so i thought the email idea would be good

Title: rootkit as a cronjob
Post by: MasterSleepy on August 10, 2004, 01:41:55 PM

Hello,

For your information, take a look at http://www.chkrootkit.org/ in FAQ section question 9.

Regards.

Title: rootkit as a cronjob
Post by: mbachmann on August 10, 2004, 02:18:42 PM

it will sent email once a week.