RKHunter : Install2024/09/09 |
Install RKHunter which is the Rootkit Detection tool. |
|
[1] | Install RKHunter. |
root@dlp:~ # pkg install -y rkhunter curl
|
[2] | Configure and Use RKHunter. |
root@dlp:~ #
vi /etc/periodic.conf # create new file # enable daily database update security_rkhunter_update_enable="YES" security_rkhunter_update_period="daily" security_rkhunter_update_flags="--update --nocolors" # add follows if enable daily system checking security_rkhunter_check_enable="YES" security_rkhunter_check_period="daily" security_rkhunter_check_flags="--checkall --nocolors --skip-keypress" # update database root@dlp:~ # rkhunter --update [ Rootkit Hunter version 1.4.6 ] Checking rkhunter data files... Checking file mirrors.dat [ Updated ] Checking file programs_bad.dat [ No update ] Checking file backdoorports.dat [ No update ] Checking file suspscan.dat [ No update ] Checking file i18n/cn [ No update ] Checking file i18n/de [ No update ] Checking file i18n/en [ No update ] Checking file i18n/tr [ No update ] Checking file i18n/tr.utf8 [ No update ] Checking file i18n/zh [ No update ] Checking file i18n/zh.utf8 [ No update ] Checking file i18n/ja [ No update ] # update system file properties root@dlp:~ # rkhunter --propupd [ Rootkit Hunter version 1.4.6 ] File created: searched for 173 files, found 122 # run checking # [--sk] means skipping to push Enter key # [--rwo] means display only warnings root@dlp:~ # rkhunter --check --sk
[ Rootkit Hunter version 1.4.6 ] Checking system commands... Performing 'strings' command checks Checking 'strings' command [ OK ] Performing 'shared libraries' checks Checking for preloading variables [ None found ] Checking for preloaded libraries [ None found ] Checking LD_LIBRARY_PATH variable [ Not found ] Performing file properties checks Checking for prerequisites [ OK ] /sbin/dmesg [ OK ] /sbin/fsck [ OK ] /sbin/ifconfig [ OK ] /sbin/init [ OK ] /sbin/md5 [ OK ] /sbin/md5sum [ OK ] /sbin/mount [ OK ] /sbin/nologin [ OK ] /sbin/ping [ OK ] /sbin/route [ OK ] /sbin/sha1 [ OK ] /sbin/sha1sum [ OK ] /sbin/sha224 [ OK ] /sbin/sha224sum [ OK ] /sbin/sha256 [ OK ] /sbin/sha256sum [ OK ] /sbin/sha384 [ OK ] ..... ..... System checks summary ===================== File properties checks... Files checked: 122 Suspect files: 0 Rootkit checks... Rootkits checked : 498 Possible rootkits: 0 Applications checks... All checks skipped The system checks took: 38 seconds All results have been written to the log file: /var/log/rkhunter.log No warnings were found while checking the system. |
|