{"id":173,"date":"2015-04-27T13:20:30","date_gmt":"2015-04-27T13:20:30","guid":{"rendered":"http:\/\/betakb.veeble.org\/?p=173"},"modified":"2025-03-19T10:23:42","modified_gmt":"2025-03-19T04:53:42","slug":"rkhunter","status":"publish","type":"post","link":"https:\/\/www.veeble.com\/kb\/rkhunter\/","title":{"rendered":"How to install and configure Rkhunter"},"content":{"rendered":"\n<p>Rkhunter (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Rkhunter\" target=\"_blank\" rel=\"noopener\">Rootkit Hunter<\/a>) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing MD5 hashes of important files with known good ones in online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD.<\/p>\n\n\n\n<p>Step 1: Downloading, Installing and Updating<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">cd \/usr\/local\/src\nwget <a class=\"external free\" href=\"http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.0\/rkhunter-1.4.0.tar.gz\" rel=\"nofollow noopener\" target=\"_blank\">http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.6\/rkhunter-1.4.6.tar.gz<\/a>\nwget <a class=\"external free\" href=\"http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.0\/rkhunter-1.4.0.tar.gz.sha1\" rel=\"nofollow noopener\" target=\"_blank\">http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.6\/rkhunter-1.4.6.tar.gz.sha1<\/a>\nwget <a class=\"external free\" href=\"http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.0\/rkhunter-1.4.0.tar.gz.asc\" rel=\"nofollow noopener\" target=\"_blank\">http:\/\/sourceforge.net\/projects\/rkhunter\/files\/rkhunter\/1.4.6\/rkhunter-1.4.6.tar.gz.asc<\/a>\nsha1sum -c rkhunter-1.4.6.tar.gz.sha1.txt\ntar -zxvf rkhunter-1.4.6.tar.gz\ncd rkhunter-1.4.6\n.\/installer.sh --layout default --install\n\/usr\/local\/bin\/rkhunter --update\n\/usr\/local\/bin\/rkhunter --propupd\nrm -Rf \/usr\/local\/src\/rkhunter*\ncd\n<\/pre>\n\n\n\n<p>Step 2: Adding daily cron job<\/p>\n\n\n\n<p>Create the file <b>\/etc\/cron.daily\/rkhunter.sh<\/b> with the following contents.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">#!\/bin\/sh\n(\n\/usr\/local\/bin\/rkhunter --versioncheck\n\/usr\/local\/bin\/rkhunter --update\n\/usr\/local\/bin\/rkhunter --cronjob --report-warnings-only\n) | \/bin\/mail -s 'rkhunter Daily Run (YourServerNameHere)' name@domain.com\n<\/pre>\n\n\n\n<p>Change <i><b>YourServerNameHere<\/b><\/i> to your hostname and <i><b>name@domain.com<\/b><\/i> to your mail address.<\/p>\n\n\n\n<p>Correct the permissions.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">chmod 700 \/etc\/cron.daily\/rkhunter.sh\n<\/pre>\n\n\n\n<p>Your Server will be scanned regularly and the result will be sent to the mentioned mail address.<\/p>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-uagb-call-to-action uagb-block-ef71afa8 wp-block-button\"><div class=\"uagb-cta__wrap\"><h3 class=\"uagb-cta__title\">Hassle-Free VPS Hosting<\/h3><p class=\"uagb-cta__desc\">We handle the server, you focus on your business. Managed VPS with 24\/7 support.<\/p><\/div><div class=\"uagb-cta__buttons\"><a href=\"https:\/\/www.veeble.com\/in\/managed-vps\/\" class=\"uagb-cta__button-link-wrapper wp-block-button__link\" target=\"_blank\" rel=\"noopener noreferrer\">Explore Plans<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M504.3 273.6l-112.1 104c-6.992 6.484-17.18 8.218-25.94 4.406c-8.758-3.812-14.42-12.45-14.42-21.1L351.9 288H32C14.33 288 .0002 273.7 .0002 255.1S14.33 224 32 224h319.9l0-72c0-9.547 5.66-18.19 14.42-22c8.754-3.809 18.95-2.075 25.94 4.41l112.1 104C514.6 247.9 514.6 264.1 504.3 273.6z\"><\/path><\/svg><\/a><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing MD5 hashes of [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":7551,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[3],"tags":[],"class_list":["post-173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-installation"],"uagb_featured_image_src":{"full":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter.jpg",1366,768,false],"thumbnail":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter-150x150.jpg",150,150,true],"medium":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter-300x169.jpg",300,169,true],"medium_large":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter-768x432.jpg",768,432,true],"large":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter-1024x576.jpg",1024,576,true],"1536x1536":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter.jpg",1366,768,false],"2048x2048":["https:\/\/www.veeble.com\/kb\/wp-content\/uploads\/2015\/04\/How-to-install-and-configure-Rkhunter.jpg",1366,768,false]},"uagb_author_info":{"display_name":"Vipin Raj","author_link":"https:\/\/www.veeble.com\/kb\/author\/vipin\/"},"uagb_comment_info":0,"uagb_excerpt":"Rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing MD5 hashes of [&hellip;]","_links":{"self":[{"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/posts\/173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/comments?post=173"}],"version-history":[{"count":5,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/posts\/173\/revisions"}],"predecessor-version":[{"id":8184,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/posts\/173\/revisions\/8184"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/media\/7551"}],"wp:attachment":[{"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/media?parent=173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/categories?post=173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.veeble.com\/kb\/wp-json\/wp\/v2\/tags?post=173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}