Tool to locally check for signs of a rootkit
chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkwtmp: checks for wtmp deletions. * chkproc: checks for signs of LKM trojans. * chkdirs: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. * chkutmp: checks for utmp deletions.
Release | Stable | Testing |
---|---|---|
Fedora Rawhide | 0.55-3.fc35 | - |
Fedora 35 | 0.55-3.fc35 | - |
Fedora 34 | 0.54-2.fc34 | - |
You can contact the maintainers of this package via email at
chkrootkit dash maintainers at fedoraproject dot org
.