ChkrootKitの導入2009/06/21

[1]	サーバーに rootkit が仕掛けられていないかをチェックする ChkrootKit を導入します。既知のものしか検出できない上に、誤検知もたまにあるらしいので、検出結果は参考程度に留めておいてよいでしょう。

[root@ns ~]#

yum -y install chkrootkit

Loaded plugins: fastestmirror, refresh-packagekit
Loading mirror speeds from cached hostfile
* fedora: ftp.jaist.ac.jp
* updates: ftp.jaist.ac.jp
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package chkrootkit.x86_64 0:0.48-11.fc11 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================

Arch

Version

Repository

Size

===================================================================
Installing:
chkrootkit

x86_64

0.48-11.fc11

fedora

335 k

Transaction Summary
===================================================================
Install

1 Package(s)

Update

0 Package(s)

Remove

0 Package(s)

Total download size: 335 k
Downloading Packages:
chkrootkit-0.48-11.fc11.x86_64.rpm

335 kB 00:00

Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing: chkrootkit

1/1

Installed: chkrootkit.x86_64 0:0.48-11.fc11
Complete!
[root@ns ~]#

chkrootkit | grep INFECTED

[root@ns ~]#

# 何もでてこなければ問題なし