[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] [RaQ3] Infected files after patching
- Subject: RE: [cobalt-users] [RaQ3] Infected files after patching
- From: Carrie Bartkowiak <ravencarrie@xxxxxxxx>
- Date: Wed Sep 5 18:20:07 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Thu, 6 Sep 2001 00:46:33 -0400, Jason D. Piercy mumbled something like:
>>I have my chkrootkit in /home/chkrootkit
>>what does my crontab entry need to look like
Well, let's say you want it to run every night at 1 am and mail the results to you.
I'm gonna assume that the actual path to the program itself is /home/chkrootkit/chkrootkit. If not, change the below to whatever it really is.
Your crontab would look like such:
* 1 * * * root /home/chkrootkit/chkrootkit | mail -s "Chkrootkit Report" admin
That would run it as root and mail it to your admin account. To change the email addy just put the name of another user on the machine or a full email address.
If anyone sees anything wrong with my syntax please correct me!
--
CarrieB
"The point to remember is that what the government gives, it must first take away." --John S. Coleman