RE: chkrootkit

[aljuhani <aljuhani zajil net>]

> I'm sure someone is already doing this on the list,
> but I'm going to create a cronjob for chkrootkit and
> have it print out to a log on maybe a daily/weekly
> basis just to keep watch.

If you want to get a daily email of chkroot output, here is how:

pico /etc/cron.daily/chkrootkit.sh
 
insert the following

######begining of insert#######

#!/bin/bash 
cd /path/to/where/you/installed/chkrootkit/ 
./chkrootkit -q | mail -s "chkrootkit output" you yourdomain com

###end of insert############ 
exit the editor pico and save the script.

then

chmod 755 chkrootkit.sh

The -q only sends you the exploites.
If you want you can remove the -q from the script to get the full report.

Al-Juhani
aljuhani zajil net