cvs

You have reached the CVS page for the Rookkit Hunter team.

The CVS version may be the same as the stable version as repacks do not occur unless the dev team deem it necessary.

http://rkhunter.sourceforge.net/rkhunter-CVS.tar.gz

It is not recommended to install a CVS edition on a production server. However, from time to time, it is ok to risk if you are a home user and are experienced at what to look for.

You could also try it out in a virtual machine.

The commands are the same for the current release but has a bonus feature of being able to be run without installing into the /usr/ structure.

John suggests

" $ su -
# cd /pathway-to-download of-rkh-tarball
# tar xzf rkhunter-CVS.tar.gz    (Solaris users may need to use gtar)
# cd rkhunter
# ./installer.sh --layout custom . --install

Standalone installation into /home/gordon/Downloads/rkhunter/files
Checking system for:
Rootkit Hunter installer files: found
A web file download command: wget found
Starting installation:
Checking installation directory ".": it exists and is writable.
Installation complete

" # cd files

That's it. Everything that RKH needs is now in the current directory. You can run RKH using './rkhunter', and use the '--update' and '--versioncheck' options if you want to. Any log file will also be created within this directory. The ONLY exception to this is if you use the '--debug' option, this will create the debug file in /tmp.

So now you can run any tests you want to with the CVS version, but if you want to simply run a standard full check of your system then run:

" su -
# ./rkhunter --propupd --check --sk

(This will first create the propupd.dat file in the directory, for the file properties tests, and then it runs the full check)

All results have been written to the log file: /home/gordon/Downloads/rkhunter/files/rkhunter.log

You probably will get some warnings, but these will be from tests which you would normally whitelist (the passwd/group file tests always give a warning the first time they are run). If you want to whitelist things then just edit the './rkhunter.conf' file.

Once you have finished all your tests, then simply delete the whole directory:

Home Page