Tool to locally check for signs of a rootkit
chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkwtmp: checks for wtmp deletions. * chkproc: checks for signs of LKM trojans. * chkdirs: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. * chkutmp: checks for utmp deletions.
Release | Stable | Testing |
---|---|---|
Fedora Rawhide | 0.57-6.fc40 | - |
Fedora 40 | 0.57-6.fc40 | - |
Fedora 39 | 0.57-4.fc39 | - |
Fedora 38 | 0.57-4.fc38 | - |
You can contact the maintainers of this package via email at
chkrootkit dash maintainers at fedoraproject dot org
.