RKHunter also known as RootKit Hunter is a scanning tool to ensure you for about 99.9% that you don’t have any rootkits, backdoors, and local exploits but running tests and e-mailing you results.
1. Login ke Server via SSH dan lakukan instalasi seperti berikut:
cd /usr/local/src/
wget http://optusnet.dl.sourceforge.net/sourceforge/rkhunter/rkhunter-1.3.8.tar.gz
tar -xzvf rkhunter-1.3.8.tar.gz
cd rkhunter-1.3.8
./installer.sh –help
./installer.sh –layout /usr/local –install
2. Update Version:
rkhunter –update
3. Run a Test Scan (help to prevent false positives):
/usr/local/bin/rkhunter -c
4. Lets setup RKHunter to e-mail you you daily scan reports.
pico -w /etc/cron.daily/rkhunter.sh
Tambahkan baris perintah seperti contoh dibawah ini lalu save:
#!/bin/bash
(/usr/local/bin/rkhunter -c –cronjob 2>&1 mail -s “Daily Rkhunter Scan Report” yourmail@adress.com)
5. Jalankan permision cronjob:
chmod +x /etc/cron.daily/rkhunter.sh
Be the first to comment