RE: [cobalt-security] cron and chkrootkit

["Gary M. Root" <groot@xxxxxxxxxxxxxxx>]

You need "root" between * and (cd...) I keep my "2<&1" piece where you
had it originally.

In /etc/crontab:

# Check for Root Kit at 11:15 AM each day
15 11 * * * root (cd
/home/sites/home/users/admin/modules/chkrootkit-0.37; ./chkrootkit 2>&1
| mail -s "chkrootkit output" admin)

Make the change, restart the service, and watch it work. :)

-Gary


|-----Original Message-----
|From: cobalt-security-admin@xxxxxxxxxxxxxxx 
|[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of 
|Gerald Waugh
|Sent: Wednesday, September 25, 2002 10:57 AM
|To: cobalt-security@xxxxxxxxxxxxxxx
|Subject: Re: [cobalt-security] cron and chkrootkit
|
|
|On Wed, 25 Sep 2002, njd 76 wrote:
|
|>
|> No i did not do that in the past but i tried it today and it 
|did not work.
|> At 1:35 i wanted to run it as a test. I had the following in the
|> /etc/crontab
|>
|> 00 13:35 * * * (cd /home/sites/home/users/admin/chkrootkit-0.37;
|> ./chkrootkit | mail -s "chkrootkit output" root 2>&1)
|
|minute(s) hour(s) day(s) month(s) weekday(s) command(s)
|  35       13       *      *         *
|
|You didn't put the time in correctly...
|
|What does crontab -l say
|
|Gerald
|--
|http://frontstreetnetworks.com | http://raqware.com
|Front Street Networks LLC  | Phone: +1 203-785-0699
|229 Front Street, Ste. C, New Haven, CT. 06513-3203
|
|_______________________________________________
|cobalt-security mailing list
|cobalt-security@xxxxxxxxxxxxxxx
|http://list.cobalt.com/mailman/listinfo/cobalt-security
|
|