Re: [Rkhunter-users] Recommend Cron

[John H. <joh...@pl...>]

On Tue, 2007-01-23 at 20:04 -0600, Mike Blezien wrote:
>
> Thanks for the information. We will be running, the rkhunter cronjob -c check 
> twice a day for awhile and see what happens. We have been running it for quiet 
> some time once a day with no problems and always good reports on a RHEL 4 along 
> with our Firewall and Mod Security and few other security tools, we have been 
> hacker-free now for about 4yrs :)
> 
Ah, bold words! :-) If you are happy with running RKH twice a day then
that is fine. If you can run it more often then so much the better, but
that will be for you to experiment with.

> We have been running the --update & --versioncheck once a day always.
> 
I should have added that, as far as I remember, it is possible to run
the 'update' option with the '-c' option. The next release will handle
this better, allowing the user to run '-c', along with '--update' and/or
'--versioncheck'. However, I do not personally do this. I would rather
run the system checks very frequently, and the other options much less
frequently.



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: Joh...@pl...       Fax: +44 (0)1752 233839