RE: [cobalt-security] cron and chkrootkit

["Gary M. Root" <groot@xxxxxxxxxxxxxxx>]

By the way, I use a directory called "modules", which you may not use.
Make sure to use the correct path to chkrootkit-0.37 for your machine.

-Gary

|You need "root" between * and (cd...) I keep my "2<&1" piece where you
|had it originally.
|
|In /etc/crontab:
|
|# Check for Root Kit at 11:15 AM each day
|15 11 * * * root (cd
|/home/sites/home/users/admin/modules/chkrootkit-0.37; ./chkrootkit 2>&1
|| mail -s "chkrootkit output" admin)
|
|Make the change, restart the service, and watch it work. :)
|
|-Gary
|
|
||-----Original Message-----
||From: cobalt-security-admin@xxxxxxxxxxxxxxx 
||[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of 
||Gerald Waugh
||Sent: Wednesday, September 25, 2002 10:57 AM
||To: cobalt-security@xxxxxxxxxxxxxxx
||Subject: Re: [cobalt-security] cron and chkrootkit
||
||
||On Wed, 25 Sep 2002, njd 76 wrote:
||
||>
||> No i did not do that in the past but i tried it today and it 
||did not work.
||> At 1:35 i wanted to run it as a test. I had the following in the
||> /etc/crontab
||>
||> 00 13:35 * * * (cd /home/sites/home/users/admin/chkrootkit-0.37;
||> ./chkrootkit | mail -s "chkrootkit output" root 2>&1)
||
||minute(s) hour(s) day(s) month(s) weekday(s) command(s)
||  35       13       *      *         *
||
||You didn't put the time in correctly...
||
||What does crontab -l say
||
||Gerald
||--
||http://frontstreetnetworks.com | http://raqware.com
||Front Street Networks LLC  | Phone: +1 203-785-0699
||229 Front Street, Ste. C, New Haven, CT. 06513-3203
||
||_______________________________________________
||cobalt-security mailing list
||cobalt-security@xxxxxxxxxxxxxxx
||http://list.cobalt.com/mailman/listinfo/cobalt-security
||
||
|
|_______________________________________________
|cobalt-security mailing list
|cobalt-security@xxxxxxxxxxxxxxx
|http://list.cobalt.com/mailman/listinfo/cobalt-security
|