How to Install Rootkit Hunter on CentOS 6.4

 

1. Overview

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD.

2. Install Rootkit Hunter on CentOS 6.4

Step 1:Download the latest tarball of rkhunter
# wget http://ncu.dl.sourceforge.net/project/rkhunter/rkhunter/1.4.0/rkhunter-1.4.0.tar.gz
 
Step 2:Untar it and run the installer
# tar -xvf rkhunter-1.4.0.tar.gz
# cd rkhunter-1.4.0
# sudo ./installer.sh --layout default --install

Step 3:To update rkhunter’s database.
# sudo /usr/local/bin/rkhunter --update
# sudo /usr/local/bin/rkhunter --propupd

Step 4:To check your system for rootkits execute the following as root.
#sudo rkhunter --check

Step 5:To see all available options  
# sudo rkhunter --help

Good Luck For You!!