Knowledgebase
|
How to install and run chkrootkit
Posted by Mike C. on 11 September 2009 11:59 PM
|
|
| This can be a very useful tool if you are running any sort of local clients on your server. You want to make sure the local clients haven't compromised the machine somehow. To install you cd to /usr/ports/security/chkrootkit then you will type "make install". Once it is done you can type "chkrootkit" at the prompt and it will run through a series of checks. In order to better understand these checks you can look each one up online. If one comes back as positive don't be alarmed. Sometimes it is perfectly natural for a few things to come back positive on a busy box. I would research each positive thought to find out the true root of what it is. | |
 (448 vote(s)) Helpful Not helpful |
Comments (0)