Tool to locally check for signs of a rootkit
chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkwtmp: checks for wtmp deletions. * chkproc: checks for signs of LKM trojans. * chkdirs: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. * chkutmp: checks for utmp deletions.
Release | Stable | Testing |
---|---|---|
Fedora Rawhide | 0.58-0b.fc43 | - |
Fedora 42 | 0.58-0b.fc42 | - |
Fedora 41 | 0.58-0b.fc41 | - |
Fedora 40 | 0.57-6.fc40 | - |
You can contact the maintainers of this package via email at
chkrootkit dash maintainers at fedoraproject dot org
.