--- Neil Schneider <[EMAIL PROTECTED]> wrote:

> I've never seen an argument "sense" to make. Is that what the README says?

Yes.  Here's an excerpt:
_____
 5. Installation
 ---------------
 To compile the C programs type:
 # make sense

 After that it is ready to use and you can simply type:
 # ./chkrootkit

 6. Usage
 --------
 chkrootkit must run as root.  The simplest way is:
 # ./chkrootkit
_____

To test it on my system 

I started in my home directory:

cd

I used wget to obtain the file:

wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz

I extracted the archive:

tar xvzf chkrootkit.tar.gz

I entered the new directory:

cd chkrootkit-0.48

I compiled the C code programs:

make sense

which showed this output:

gcc -DHAVE_LASTLOG_H -o chklastlog chklastlog.c
gcc -DHAVE_LASTLOG_H -o chkwtmp chkwtmp.c
gcc -DHAVE_LASTLOG_H   -D_FILE_OFFSET_BITS=64 -o ifpromisc ifpromisc.c
gcc  -o chkproc chkproc.c
gcc  -o chkdirs chkdirs.c
gcc  -o check_wtmpx check_wtmpx.c
gcc -static  -o strings-static strings.c
gcc  -o chkutmp chkutmp.c

If you don't have gcc and make installed then you would have problems, of
course.

To run the chkrootkit Bash shell script you need to do so as the root user. 
This can vary according to the system but often sudo is needed:

sudo ./chkrootkit

Most of the output should be "not found" or "not infected" lines.  You can
minimize this with some of the options (ie -q) but it's useful to see and
understand the full output first.

James

-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-newbie

Reply via email to