:: Live Demo - ispCP Omega RC5

[BeNe]

Updated to r888

Quote:btw, what have you found out about
Quote:
/var/log/chkrootkit.log doesn't exist or is empty

When i run the cronjob manuel it works. But every day the files is empty again.
Maybe it has something todo with the default chrootkit cronjob in /etc/cron.daily/

Greez BeNe

[Zothos]

could you post the default cron entry plz? I dont have rkhunter installed atm

[BeNe]

Quote:I dont have rkhunter installed atm

The Problem is the chkrootkit log and not rkhunter

Here it is /etc/cron.daily/chkrootkit:

Code:

#!/bin/sh -e

CHKROOTKIT=/usr/sbin/chkrootkit
CF=/etc/chkrootkit.conf
LOG_DIR=/var/cache/chkrootkit

if [ ! -x $CHKROOTKIT ]; then
  exit 0
fi

if [ -f $CF ]; then
    . $CF
fi

if [ "$RUN_DAILY" = "true" ]; then
    if [ "$DIFF_MODE" = "true" ]; then
        $CHKROOTKIT $RUN_DAILY_OPTS > $LOG_DIR/log.new 2>&1
        if [ ! -f $LOG_DIR/log.old ] \
           || ! diff -q $LOG_DIR/log.old $LOG_DIR/log.new > /dev/null 2>&1; then
            cat $LOG_DIR/log.new
        fi
        mv $LOG_DIR/log.new $LOG_DIR/log.old
    else
        $CHKROOTKIT $RUN_DAILY_OPTS
    fi
fi

Greez BeNe

[Zothos]

I meant that

[raphael]

Quote:Maybe it has something todo with the default chrootkit cronjob in /etc/cron.daily/

hmm, no, it isn't related (different paths are used).

what about replacing the line in cron.d/ispcp which looks like:

Quote:0 0,12 * * * root chkrootkit 2>&1 > /var/log/chkrootkit.log

with

Quote:0 0,12 * * * root chkrootkit > /var/log/chkrootkit.log 2>&1

[BeNe]

I changed it! We will see what happend tomorrow

Greez BeNe

[gOOvER]

I changed it too.....Maybe it works.....

[BeNe]

No, it does not work!

Code:

/var/log/chkrootkit.log:
      
/bin/sh: chkrootkit: command not found

Greez BeNe

[joximu]

apt-get install chkrootkit

# which chkrootkit
/usr/sbin/chkrootkit

/J

[BeNe]

chkrootkit is already installed - and it works if i do it manually

Code:

# which chkrootkit
/usr/sbin/chkrootkit

Correct, i have this output!

I does only not work with the cron...

Greez BeNe