Hướng dẫn cài đặt Rootkit Hunter (rkhunter) trên linux 6.x

Mục lục:

Hướng dẫn cài đặt : Rootkit Hunter

Bước 1: download rootkit hunter

wget http://dfn.dl.sourceforge.net/sourceforge/rkhunter/rkhunter-1.4.2.tar.gz

1	wget http://dfn.dl.sourceforge.net/sourceforge/rkhunter/rkhunter-1.4.2.tar.gz

Bước 2 : Cài đặt

tar -zxvf rkhunter-1.4.2.tar.gz
cd rkhunter-1.4.2

./installer.sh --layout default --install
/usr/local/bin/rkhunter --update
/usr/local/bin/rkhunter --propupd
rm -Rf /usr/local/src/rkhunter*

tar -zxvf rkhunter-1.4.2.tar.gz

cd rkhunter-1.4.2

./installer.sh --layout default --install

/usr/local/bin/rkhunter --update

/usr/local/bin/rkhunter --propupd

rm -Rf /usr/local/src/rkhunter*

Bước 3 : Cấu hình để root có thể login ssh bình thường

vi /etc/rkhunter.conf

ALLOW_SSH_ROOT_USER=yes

vi /etc/rkhunter.conf

ALLOW_SSH_ROOT_USER=yes

Bước 4: Update

/usr/local/bin/rkhunter --versioncheck

/usr/local/bin/rkhunter --update

/usr/local/bin/rkhunter --propupd

/usr/local/bin/rkhunter --versioncheck

/usr/local/bin/rkhunter --update

/usr/local/bin/rkhunter --propupd

Bước 5: Scan

/usr/local/bin/rkhunter -c -sk

1	/usr/local/bin/rkhunter -c -sk

hoặc

rkhunter --check

1	rkhunter --check

Bước 6: Cấu hình cron chạy rkhunter theo lịch

vi /etc/cron.daily/rkhunter.sh

1	vi /etc/cron.daily/rkhunter.sh

#!/bin/sh
(
/usr/local/bin/rkhunter –versioncheck
/usr/local/bin/rkhunter –update
/usr/local/bin/rkhunter –cronjob –report-warnings-only
) | /bin/mail -s ‘rkhunter scan rootkit ‘ root@localhost