You could have saved yourself a lot of trouble by using "chkrootkit -q".

Also, if you skip the "2>&1" and "| mail -s "chkrootkit
>  output" root", it'll mail root, anyhow.

On Thu, 19 Dec 2002, Peter Kiem wrote:

> > I'm sure someone is already doing this on the list,
> > but I'm going to create a cronjob for chkrootkit and
> > have it print out to a log on maybe a daily/weekly
> > basis just to keep watch.
> 
> >From my crontab :)
> 
> 0 3 * * * (cd /usr/sbin/chkrootkit; ./chkrootkit 2>&1 | grep -v "\.\.\.
> \(not\|nothing\) \(found\|infected\|detected\)" | mail -s "chkrootkit
>  output" root)
> 
> Strips out a lot of the lines that just say "nothings wrong" and leaves
> the more interesting bits
> 
> 

-- 
Mike Burger
http://www.bubbanfriends.org

Visit the Dog Pound II BBS
telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to