< Home - < Back

chkrootkit


Information about the package, chkrootkit, which is shipped with common Linux distributions. The chkrootkit package is designed for, Tool to locally check for signs of a rootkit.


Package Name:

chkrootkit

Summary:

Tool to locally check for signs of a rootkit

Description:

chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkwtmp: checks for wtmp deletions. * chkproc: checks for signs of LKM trojans. * chkdirs: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. * chkutmp: checks for utmp deletions.

Architecture:

x86_64

Version:

0.49

Release:

9.el6

Size:

310 k

Repository:

epel

From Repository:

Licence:

BSD and GPLv2+ and Python



Handy Yum Commands for chkrootkit


Control the chkrootkit package with the following handy commands outlined below.


Command

Description of Command

yum install chkrootkit

This command will install chkrootkit on the server.

yum remove chkrootkit

This command will un-install chkrootkit on the server. When you run this command, you will be asked if you are sure that you want to remove chkrootkit, so you have to manually confirm that you want to do this.

yum -y remove chkrootkit

This command will un-install chkrootkit on the server. When you run this command with th e -y flag, you will not be prompted to check that you are sure you want to remove the package - so be sure you absolutely want to remove chkrootkit when using the -y flag.

yum update chkrootkit

This command will update chkrootkit to the latest version. When you run this command, you will be asked if you are sure that you want to remove chkrootkit, so you have to manually confirm that you want to do this.

yum -y update chkrootkit

This command will update chkrootkit to the latest version. When you run this command with the -y flag, you will not be prompted to check that you are sure you want to remove the package - so be sure you absolutely want to remove chkrootkit when using the -y flag.

yum info chkrootkit

This command will show you core information about the chkrootkit package.

yum deplist chkrootkit

This command will show you the dependencies for chkrootkit. Thankfully, when using Yum, if dependencies are required, these are also installed at the same time so you don't have to worry too much about that.

yum check-update chkrootkit

This command will check if there is an update waiting on chkrootkit. When you run this command this will return nothing if there is nothing to update, or, will return the package name if the package is due to be updated.