rootkit-hunter.md

Rootkit Hunter (RKHunter)

References:

• RKHunter project page
• Article by Digital Ocean
• For latest release go here

On the moment of writing latest release is: v1.4.6 2018-02-24

Installation:

Download RKHunter script

wget https://downloads.sourceforge.net/project/rkhunter/rkhunter/1.4.6/rkhunter-1.4.6.tar.gz

Unpack RKHunter archive and install:

tar xzvf rkhunter-1.4.6.tar.gz
cd rkhunter-1.4.6
./installer.sh --install
cd ../
rm -Rf rkhunter-1.4.6*

Install prerequisites:

apt-get install binutils libreadline5 ssl-cert unhide

RKHunter also requires ruby to be installed. Read more about ruby installation.

Update RKHunter database and generate file properties database used by RKHunter:

rkhunter --update --propupd

Run full system check:

rkhunter -c --enable all --disable none

Read more detailed setup at Digital Ocean article

Further reading:

• Use Lynis for security audit
• Basic firewall with iptables
• Digital Ocean article