Re: [cobalt-users] [RaQ3] Infected files after patching

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Carrie Bartkowiak wrote:

> Well, let's say you want it to run every night at 1 am and mail the results to you.
> I'm gonna assume that the actual path to the program itself is /home/chkrootkit/chkrootkit. If not, change the below to whatever it really is.
> Your crontab would look like such:
> * 1 * * * root /home/chkrootkit/chkrootkit | mail -s "Chkrootkit Report" admin
> 
> That would run it as root and mail it to your admin account. To change the email addy just put the name of another user on the machine or a full email address.
> 
> If anyone sees anything wrong with my syntax please correct me!

You've been reading too many man pages, Carrie.  The "preferred" way is
to just put a two-line script file into /etc/cron.daily as root.  Be
sure to mark it executable.  See /etc/cron.daily/logrotate as an
example.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205