Skip to content

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special test…

Notifications You must be signed in to change notification settings

softasap/sa-secure-audit-rkhunter

Repository files navigation

sa-secure-audit-rkhunter

Build Status

Example of use: check box-example

Simple:

     - {
         role: "sa-secure-audit-rkhunter"
       }

Advanced:

tool will try to install mailutils, if they are not installed. To gain more control over your system, I would recommend configure system for mail sending in advance, rather than rely on defaults. sa-postfix is one of the possible roles, included in box-example

     - {
         role: "sa-postfix",
         tags: ["create", "update"]
       }
     - {
         role: "sa-secure-audit-rkhunter"
       }

Using rkhunter:

sudo rkhunter -c --sk

Idea for cronjob:

/usr/bin/rkhunter -c --cronjob 2>&1 | mail -s "RKhunter Scan Results" [email protected]

Database update:

sudo rkhunter --update

Copyright and license

Code licensed under the [BSD 3 clause] (https://opensource.org/licenses/BSD-3-Clause) or the [MIT License] (http://opensource.org/licenses/MIT).

Subscribe for roles updates at [FB] (https://www.facebook.com/SoftAsap/)

About

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special test…

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published