RKHunter : स्थापित करना2023/09/20 |
RKHunter इंस्टॉल करें जो रूटकिट डिटेक्शन टूल है। |
|
[1] | RKHunter स्थापित करें। |
root@dlp:~# apt -y install rkhunter curl
|
[2] | कॉन्फ़िगर करें और RKHunter का उपयोग करें। |
root@dlp:~#
vi /etc/default/rkhunter # यदि [yes] सेट किया जाता है, तो दैनिक क्रॉन जॉब चलाया जाएगा CRON_DAILY_RUN="" # रिपोर्ट प्राप्त करने के लिए ईमेल पता सेट करें REPORT_EMAIL="root"
root@dlp:~#
vi /etc/rkhunter.conf # पंक्ति 107 : परिवर्तन UPDATE_MIRRORS= 1
# पंक्ति 122 : परिवर्तन MIRRORS_MODE= 0
# पंक्ति 1190 : रिक्त में बदलें WEB_CMD="" # डेटाबेस अद्यतन करें root@dlp:~# rkhunter --update [ Rootkit Hunter version 1.4.6 ] Checking rkhunter data files... Checking file mirrors.dat [ Updated ] Checking file programs_bad.dat [ No update ] Checking file backdoorports.dat [ No update ] Checking file suspscan.dat [ No update ] Checking file i18n/cn [ Skipped ] Checking file i18n/de [ Skipped ] Checking file i18n/en [ No update ] Checking file i18n/tr [ Skipped ] Checking file i18n/tr.utf8 [ Skipped ] Checking file i18n/zh [ Skipped ] Checking file i18n/zh.utf8 [ Skipped ] Checking file i18n/ja [ Skipped ] # सिस्टम फ़ाइल गुणों को अद्यतन करें root@dlp:~# rkhunter --propupd [ Rootkit Hunter version 1.4.6 ] File updated: searched for 180 files, found 142 # जाँच चलाएँ # [--sk] का अर्थ है एंटर कुंजी दबाने के लिए स्किप करना # [--rwo] का अर्थ है केवल चेतावनियाँ प्रदर्शित करना root@dlp:~# rkhunter --check --sk
[ Rootkit Hunter version 1.4.6 ] Checking system commands... Performing 'strings' command checks Checking 'strings' command [ OK ] Performing 'shared libraries' checks Checking for preloading variables [ None found ] Checking for preloaded libraries [ None found ] Checking LD_LIBRARY_PATH variable [ Not found ] Performing file properties checks Checking for prerequisites [ OK ] /usr/sbin/adduser [ OK ] /usr/sbin/chroot [ OK ] /usr/sbin/cron [ OK ] /usr/sbin/depmod [ OK ] /usr/sbin/fsck [ OK ] /usr/sbin/groupadd [ OK ] /usr/sbin/groupdel [ OK ] /usr/sbin/groupmod [ OK ] /usr/sbin/grpck [ OK ] /usr/sbin/ifconfig [ OK ] /usr/sbin/init [ OK ] /usr/sbin/insmod [ OK ] /usr/sbin/ip [ OK ] /usr/sbin/lsmod [ OK ] /usr/sbin/modinfo [ OK ] /usr/sbin/modprobe [ OK ] /usr/sbin/nologin [ OK ] /usr/sbin/pwck [ OK ] /usr/sbin/rmmod [ OK ] ..... ..... System checks summary ===================== File properties checks... Files checked: 142 Suspect files: 0 Rootkit checks... Rootkits checked : 498 Possible rootkits: 0 Applications checks... All checks skipped The system checks took: 40 seconds All results have been written to the log file: /var/log/rkhunter.log One or more warnings have been found while checking the system. Please check the log file (/var/log/rkhunter.log) |
Sponsored Link |