Difference between revisions of "Rkhunter"

From CBLFS
Jump to navigationJump to search
(Added page.)
 
 
(4 intermediate revisions by one other user not shown)
Line 3: Line 3:
 
!Download Source:
 
!Download Source:
 
|http://downloads.sourceforge.net/rkhunter/rkhunter-{{Rkhunter-Version}}.tar.gz
 
|http://downloads.sourceforge.net/rkhunter/rkhunter-{{Rkhunter-Version}}.tar.gz
 +
|-
 
|}
 
|}
  
 
----
 
----
  
{{Package-Introduction|rkhunter is a security monitoring and analyzing tool.|http://rkhunter.sourceforge.net/index.html#about}}
+
{{Package-Introduction|rkhunter is a security monitoring and analyzing tool.|http://www.rootkit.nl/}}
  
 
== Dependencies ==
 
== Dependencies ==
 +
 +
=== Required ===
 +
* [[wget]]
  
 
=== Recommended ===
 
=== Recommended ===
 
+
* [[fcron]] or [[Vixie-Cron]]
* [[fcron]]
 
  
 
=== Optional ===
 
=== Optional ===
 
 
* [[NetTools]]
 
* [[NetTools]]
  
Line 23: Line 25:
 
Run the install script as a privileged user to install rkhunter.
 
Run the install script as a privileged user to install rkhunter.
  
  ./installer.sh --installdir /usr
+
  ./installer.sh --layout /usr --install
  
The rkhunter script is installed in /usr/local/bin even if the --installdir flag is passed to the installer.  Move the script to /usr/bin:
+
== Configuring ==
 
 
mv -v /usr/local/bin/rkhunter /usr/bin
 
  
== Configuring ==
+
Update the rkhunter databases.
  
The rkhunter configuration file is installed in /usr/local/etc even if the --installdir flag is passed to the installer.  Yet the rkhunter script itself looks for the configuration file in /etc first.  Move the script to /etc:
+
rkhunter --update
  
  mv -v /usr/local/etc/rkhunter.conf /etc
+
Runtime options are defined in the rkhunter configuration file. Edit this file to change the behavior of rkhunter.
  
Runtime options are defined in the rkhunter configuration file.  Edit this file to change the behavior of rkhunter.  Add entries to your crontab to periodically run rkhunter.
+
Add entries to your (f)crontab to periodically run rkhunter.
  
 
  # Run rkhunter update every Friday at 2:00 am.
 
  # Run rkhunter update every Friday at 2:00 am.
Line 44: Line 44:
 
== Contents ==
 
== Contents ==
  
{| style="text-align: left;"
+
{|style="text-align: left;"
 
|-valign="top"
 
|-valign="top"
 
!Installed Directories:
 
!Installed Directories:
|/usr/lib/rkhunter
+
|/usr/lib/rkhunter, /var/lib/rkhunter
 
|-valign="top"
 
|-valign="top"
 
!Installed Programs:
 
!Installed Programs:
Line 61: Line 61:
 
|is a script for security monitoring and analyses of your system.
 
|is a script for security monitoring and analyses of your system.
 
|}
 
|}
 +
 +
[[Category:General Utilities]]

Latest revision as of 15:02, 19 March 2009

Download Source: http://downloads.sourceforge.net/rkhunter/rkhunter-1.3.2.tar.gz

Introduction to Rkhunter

rkhunter is a security monitoring and analyzing tool.

Project Homepage: http://www.rootkit.nl/

Dependencies

Required

Recommended

Optional

Non-Multilib or Multilib

Run the install script as a privileged user to install rkhunter.

./installer.sh --layout /usr --install

Configuring

Update the rkhunter databases.

rkhunter --update

Runtime options are defined in the rkhunter configuration file. Edit this file to change the behavior of rkhunter.

Add entries to your (f)crontab to periodically run rkhunter.

# Run rkhunter update every Friday at 2:00 am.
& 00 02 * * fri /usr/bin/rkhunter --update
# Run rkhunter as a cronjob every Friday at 3:00 am.
& 00 03 * * fri /usr/bin/rkhunter --cronjob

Contents

Installed Directories: /usr/lib/rkhunter, /var/lib/rkhunter
Installed Programs: rkhunter

Short Descriptions

rkhunter is a script for security monitoring and analyses of your system.