Howto: Chkrootkit
There was a new version released today.I know this forum is not the right place but everyone should know how easy this is to setup.
1) wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
2) tar zxvf chkrootkit.tar.gz
3) cd chkrootkit*
4) make
5) ./chkrootkit -q
If it says infected you may have a problem.
You can make it run automatically once a day or more via a cronjob like suggested on chkrootkit site.
Can I run chkrootkit from cron?
Yes. For example, to run chkrootkit every day at 3am and mail the output to root:
0 3 * * * (cd /path/to/chkrootkit; ./chkrootkit 2>&1 | mail -s "chkrootkit output" root)
Yes. For example, to run chkrootkit every day at 3am and mail the output to root:
0 3 * * * (cd /path/to/chkrootkit; ./chkrootkit 2>&1 | mail -s "chkrootkit output" root)