chkrootkit - Locally checks for signs of a rootkit HOWTO

ChangeLog


Nov 11, 2005	- 0.45 -> 0.46a
		- Removed gpg verification (with a note)
		- Rearranged options to shut up new version of find
		- Removed a patch from 0.45 that doesn't seem to be
		  necessary any more (login shows INFECTED if shadow > 4.0.6
		  without PAM support)
		- Added a patch to fix INFECTED netstat
Apr 11, 2005	- Added link to the mailing list in the part about procps
		  2.x vs. 3.x
		- Added sha1sum verification
		- Changed md5sum and sha1sum verification to output OK (or not)
		- root.root -> root:root
		- Replaced the shadow >= 4.0.6 note and what to change to
		  band-aid it with an updated note and a patch that'll fix it
		  for you
		- Updated the perl .packlist patch
		- Updated the script run from cron.daily to only e-mail when
		  'chkrootkit -q' outputs something, left the other
		  commandline commented out
		- Added note about mktemp to the part about the cron script
Feb 22, 2005	- 0.44 -> 0.45
		- After removing the old version, before installing the
		  new one, remove the /usr/local/chkrootkit symlink too
		  (to prevent symlinks to itself)
		- Changed text mention of procps to link to the howto
Sep 14, 2004	- 0.43 -> 0.44
		- Changed the md5sum -> textutils link to point to coreutils
		- Added gpg verification of tarball
		- Added note about LKM with the ps from Rik van Riel and
		  Robert Love's version of procps
		- Updated the run with all tests example to pipe the output
		  to less and to display stdout and stderr in case of errors
Feb 6, 2004	- Changed a >> to >&gt so it wouldn't be
		  HTMLized - making the EOF next to it go away
Dec 29, 2003	- 0.42b -> 0.43
Sep 22, 2003	- 0.41 -> 0.42b
Aug 27, 2003	- Create ~/installed with mode 700
		- Added something to create /etc/cron.daily/chkrootkit
Apr 9, 2003	- 0.39a -> 0.40
		- Updated the part with my patch to apply it too
Feb 3, 2003	- 0.38 -> 0.39a
		- Added link to a patch of mine that ignores .packlist files
		  in /usr/lib/perl5 for the suspicious files and dirs part
Dec 23, 2002	- 0.37 -> 0.38
		- Added example crontab entry
Sep 17, 2002	- First entry

List of HOWTOs

Web page itself last updated: 2023-12-20 8:06pm (EST -0500)
Copyright © 2001-2024 Jason Englander. All Rights reserved.
[HTML5]