Rootkit Hunter

Rootkit Hunter install script

Installs all dependencies using apt or yum

Tested on:

• CentOS 5.8/6.4
• Debian 6.0/7.0
• Fedora 17
• Ubuntu 10.04/12.04/12.10

Default temp dir is /tmp/rkhunter, this can be changed in install script.

By default, the installer logs into $TMP/install.log and $TMP/error.log. Check these for further info about the installation process.

Dependencies

• Package manager (apt or yum)
• HTTP Client (curl, wget or fetch)
• TAR executable
• Mail (Debian/Ubuntu: mailutils, RHEL: mailx)

Dependencies will be installed during the progress, but installing them on your own is advised.

Installation

Download and run install.sh [email protected]

Offline installation

Clone this repository or download install.sh and download the following file manually into the install script path:

Rootkit Hunter Archive

Run install.sh [email protected]

Create file /etc/cron.daily/rkhunter.sh with execute permission, and paste the following content:

#!/bin/sh
(
	/usr/local/bin/rkhunter --versioncheck
	/usr/local/bin/rkhunter --update
	/usr/local/bin/rkhunter --cronjob --report-warnings-only
) | /bin/mail -s 'rkhunter Daily Run (HOSTNAME)' [email protected]

Note: You can run your cron jobs whenever you want.

For further info check Installation tutorial