chkrootkit and logcheck mail notification
#apt-get install cron
#crontab /etc/crontab
#apt-get install chkrootkit
write a script ‘chkrootkit’ and save in /
#/bin/bash
cd /usr/sbin/ && ./chkrootkit 2>&1 | mail -s “chkrootkit output” yourname@xyz.com
#chmod 777 / chkrootkit
#apt-get install logcheck
we edit the /etc/logcheck/logcheck.conf
INTRO=1
REPORTLEVEL=”server”
SENDMAILTO=”yourname@xyz.com”
FQDN=1
RULEDIR=”/etc/logcheck”
then we write a script ‘logcheck’ and save in /
#/bin/bash
su -s /bin/bash -c “/usr/sbin/logcheck” logcheck
#chmod 777 /logcheck
we add the chkrootkit and logcheck script in the /var/spool/cron/crontabs/root
46 12 * * * /./chkrootkit
46 12 * * * /./logcheck
done 🙂