User Tools

Site Tools


rootkit_hunter:configuration

This is an old revision of the document!


Rootkit Hunter - Configuration

The Rootkit Hunter configuration file is stored at /etc/rkhunter.conf. This file is well documented and contain many of Rootkit Hunter's configuration options.

The following are all options currently set.

/etc/rkhunter.conf
TMPDIR=/var/lib/rkhunter/tmp
DBDIR=/var/lib/rkhunter/db
SCRIPTDIR=/usr/share/rkhunter/scripts
LOGFILE=/var/log/rkhunter.log
USE_SYSLOG=authpriv.warning
AUTO_X_DETECT=1
ENABLE_TESTS=all
DISABLE_TESTS=suspscan hidden_procs deleted_files packet_cap_apps apps
HASH_CMD=sha256sum
 
SCRIPTWHITELIST=/bin/egrep
SCRIPTWHITELIST=/bin/fgrep
SCRIPTWHITELIST=/bin/which
SCRIPTWHITELIST=/usr/bin/ldd
#SCRIPTWHITELIST=/usr/bin/lwp-request
SCRIPTWHITELIST=/usr/sbin/adduser
#SCRIPTWHITELIST=/usr/sbin/prelink
#SCRIPTWHITELIST=/usr/sbin/unhide.rb
 
DISABLE_UNHIDE=1
 
INSTALLDIR=/usr
/etc/default/rkhunter.conf
# Defaults for rkhunter automatic tasks
# sourced by /etc/cron.*/rkhunter and /etc/apt/apt.conf.d/90rkhunter
#
# This is a POSIX shell fragment
#
 
# Set this to yes to enable rkhunter daily runs
# (default: true)
CRON_DAILY_RUN="yes"
 
# Set this to yes to enable rkhunter weekly database updates
# (default: true)
CRON_DB_UPDATE="yes"
 
# Set this to yes to enable reports of weekly database updates
# (default: false)
#DB_UPDATE_EMAIL="false"
DB_UPDATE_EMAIL="yes"
 
# Set this to the email address where reports and run output should be sent
# (default: root)
#REPORT_EMAIL="root"
REPORT_EMAIL="admin@sharewiz.net"
 
# Set this to yes to enable automatic database updates
# (default: false)
APT_AUTOGEN="false"
 
# Nicenesses range from -20 (most favorable scheduling) to 19 (least favorable)
# (default: 0)
NICE="0"
 
# Should daily check be run when running on battery
# powermgmt-base is required to detect if running on battery or on AC power
# (default: false)
RUN_CHECK_ON_BATTERY="false"
/etc/default/rkhunter.ucf-dist
# Defaults for rkhunter automatic tasks
# sourced by /etc/cron.*/rkhunter and /etc/apt/apt.conf.d/90rkhunter
#
# This is a POSIX shell fragment
#
 
# Set this to yes to enable rkhunter daily runs
# (default: false)
CRON_DAILY_RUN="yes"
 
# Set this to yes to enable rkhunter weekly database updates
# (default: false)
CRON_DB_UPDATE="yes"
 
# Set this to yes to enable reports of weekly database updates
# (default: false)
DB_UPDATE_EMAIL="false"
 
# Set this to the email address where reports and run output should be sent
# (default: root)
REPORT_EMAIL="root"
 
# Set this to yes to enable automatic database updates
# (default: false)
APT_AUTOGEN="false"
 
# Nicenesses range from -20 (most favorable scheduling) to 19 (least favorable)
# (default: 0)
NICE="0"
 
# Should daily check be run when running on battery
# powermgmt-base is required to detect if running on battery or on AC power
# (default: false)
RUN_CHECK_ON_BATTERY="false"
rootkit_hunter/configuration.1595719010.txt.gz · Last modified: 2020/07/25 23:16 by 108.59.8.70

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki