[cobalt-security] How to install chkrootkit

["Stefan Jones" <stefan.w.jones@xxxxxxxxxxx>]

I think I have acquired a copy of chkrootkit.  But I am unaware of the
best way to install this software on a Sun Cobalt Qube 3 Professional.
It was downloaded from http://www.chkrootkit.com/#related_links  but
does not appear to be the typical pkg that I can run the install
manually on.  Any help would be appreciated, I am somewhat of a Linux
newbie.  And seriously interested in the enhanced security monitoring
capabilities that chkrootkit can offer.

Stefan Wynn Jones

> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx [mailto:cobalt-security-
> admin@xxxxxxxxxxxxxxx] On Behalf Of cobalt-security-
> request@xxxxxxxxxxxxxxx
> Sent: Thursday, November 28, 2002 3:00 PM
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: cobalt-security digest, Vol 1 #996 - 1 msg
> 
> Send cobalt-security mailing list submissions to
> 	cobalt-security@xxxxxxxxxxxxxxx
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://list.cobalt.com/mailman/listinfo/cobalt-security
> or, via email, send a message with subject or body 'help' to
> 	cobalt-security-request@xxxxxxxxxxxxxxx
> 
> You can reach the person managing the list at
> 	cobalt-security-admin@xxxxxxxxxxxxxxx
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cobalt-security digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: CROND (John 'JAYTEE' Tompkins)
> 
> --__--__--
> 
> Message: 1
> Date: Thu, 28 Nov 2002 16:52:05 +1100
> Subject: Re: [cobalt-security] CROND
> From: "John 'JAYTEE' Tompkins" <jaytee@xxxxxxxxx>
> To: cobalt-security@xxxxxxxxxxxxxxx
> Reply-To: cobalt-security@xxxxxxxxxxxxxxx
> 
> Tom,
> On Our RAQ3, CROND appears as a process when monitor.pl executes on
the
> quarter hour
> All ways has...
> 
> JAYTEE
> 
> On Wednesday, November 27, 2002, at 09:12  AM, Skyhound Internet
wrote:
> 
> > I have a process running on one of my Raq4's called CROND.  Not to
be
> > mistaken with crond.
> >
> > root      4180  0.0  0.1  1156  536 ?        S    14:09   0:00 CROND
> >
> > I am unaware of what this process is. The latest chkrootkit shows no
> > hacks.
> >
> > A reboot of the machine cleared it out but it came back again the
next
> > day.
> >
> > Any ideas of what this might be?
> >
> > Thanks
> >
> > Tom
> >
> > _______________________________________
> > Skyhound Internet
> > Long Beach CA
> >
> > _______________________________________________
> > cobalt-security mailing list
> > cobalt-security@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-security
> >
> 
> 
> 
> --__--__--
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
> 
> 
> End of cobalt-security Digest