security/rkhunter 1.4.6_3 DragonFly

Rootkit detection tool

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: GPLv2+
Categories: security
Package size: 223.1 KiB, 1132.5 KiB installed

Description

Rootkit Hunter is scanning tool to ensure you for about 99.9%25 you're clean of nasty tools.

This tool scans for rootkits, backdoors and local exploits by running tests like:

MD5/SHA1 hash compare
Look for default files used by rootkits
Wrong file permissions for binaries
Look for suspected strings in LKM and KLD modules
Look for hidden files
Optional scan within plaintext and binary files

Install

Binary package:

pkg install rkhunter

From DPorts:

cd /usr/dports/security/rkhunter && make install clean

Dependencies

Run dependencies 2

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

You should keep your rkhunter database up-to-date.
This can be done automatically by putting this line to periodic.conf(5) files:

security_rkhunter_update_enable="YES"
security_rkhunter_update_period="daily"
security_rkhunter_update_flags="--update --nocolors"

Also, you can run rkhunter as a part of the daily security check by
putting this line to periodic.conf(5) files:

security_rkhunter_check_enable="YES"
security_rkhunter_check_period="daily"
security_rkhunter_check_flags="--checkall --nocolors --skip-keypress"