Installing chkrootkit on FreeBSD
Log into each server as root.
- cd /usr/ports/security/chkrootkit
- make
- make install
- Add the following to cron:
### Security check at 3:05 AM (ENTER)
5 3 * * * (/usr/local/sbin/chkrootkit | mail -s "[PUT IN UNIQUE SERVER ID OR IP HERE] chkrootkit output" [your email address goes here])
If you want to set up your system to automatically upgrade chkrootkit when upgrades become available, create a cron script to run the following on a daily or weekly basis:
/usr/local/sbin/portupgrade -P chkrootkit
/usr/local/sbin/portupgrade -P portupgrade
IMPORTANT NOTE: This document is based on FreeBSD. The concepts
should be similar across operating systems, but the commands will very likely be different. Also, never
assume the directory structures exist in your system as written in the document. Never blindly follow
security instructions -- read, review, compare, apply as it fits your system.
|
