Rootkit Hunter

Yama · Posted: Thu Apr 08, 2004 4:40 am Post subject: Rootkit Hunter

Has anybody here tried Rootkit Hunter? It appears to be similar to chkrootkit. Their Web site says it has been tested on Gentoo 1.4. I would like to know what Gentoo users think of this tool.

ectospasm · Posted: Thu Apr 08, 2004 4:56 am Post subject:

Assuming it works correctly I think it's a great tool. I just wish the -c option allowed for automatic running (i.e. it didn't require user input to perform a full scan).
_________________
Join the adopt an unanswered post initiative today
Join the EFF!
Join the Drug Policy Alliance!

mebur · n00b Joined: 08 Apr 2004 Posts: 2 Location: Uppsala/Sweden

zerb · Posted: Thu Apr 08, 2004 10:06 am Post subject:

I tried it and it works quite nice. Nicer on the eyes than chkrootkit.

Yama · Posted: Thu Apr 08, 2004 12:17 pm Post subject: ebuild?

Anybody got an ebuild for this?

charlesnadeau · Posted: Thu Apr 08, 2004 2:07 pm Post subject:

I tried it and it works well.
To emerge it:

Yama · Posted: Thu Apr 08, 2004 2:49 pm Post subject:

I actually meant an ebuild for Rootkit Hunter, not chkrootkit. Thanks anyway, though

nitro322 · Guru Joined: 24 Jul 2002 Posts: 596 Location: USA

just read a review on this and tried it out myself. Works great on a Gentoo system, and even saw a couple options specific to Gentoo (such as checking /etc/conf.d/local.start). I wouldn't mind an ebuild either, if anyone's up the task.

Arno · Posted: Mon May 31, 2004 12:27 am Post subject:

Posted an ebuild to bugs.gentoo.org, now app-admin/rkhunter is in portage :-)

nitro322 · Guru Joined: 24 Jul 2002 Posts: 596 Location: USA

sweet, thanks!

jstuart · n00b Joined: 03 Dec 2002 Posts: 57

Perfect timing Arno.

Thx!
_________________
Jeff Stuart
JAHGU (Just another happy Gentoo User)