Re: [cobalt-users] Chkrootkit on a Qube 3

[Dogsbody <dan@xxxxxxxxxxxx>]

Hi Brian,

When you run the run things in a cron job it's good practice to cd to the
directory first to avoid this very problem.

e.g. the command should be 'cd /root/chkrootkit-0.35; ./chkrootkit'

Personally I would run it as... '45 3 * * * cd /root/chkrootkit-0.35;
./chkrootkit -q 2>&1 | mail -s "Chkrootkit-0.35 Output" YOUR-EMAIL-ADDRESS'

I hope this helps

Regards

Dan
dan@xxxxxxxxxxxx
http://www.dogsbody.org


"Brian R. Poppenwimer" wrote:
> 
> Hey!
>         Quick question, (I hope).  I have recently recompiled and put
> the latest version of chkrootkit on my Qube.  The old version worked
> fine.  This version also works fine, when I login and run it from a
> prompt.  My problem comes when I put it in the cron.daily, so I can get
> daily checks emailed to me.  It does the following: (excerpt from
> chkrootkit email)
> 
> Checking `ldsopreload'... can't exec ./strings-static, not tested
> Checking `lkm'... not tested: can't exec ./chkproc
> Checking `sniffer'... not tested: can't exec ./ifpromisc
> Checking `wted'... not tested: can't exec ./chkwtmp
> Checking `z2'... not tested: can't exec ./chklastlog
> 
> Any ideas on how to fix this, as I said it only occurs when it is run
> from cron, when I'm logged in it runs fine.  Can it for some reason not
> know where these files are when it is run from cron?  Looking in the
> wrong spot?  Any suggestions would be greatly appreciated.
> Thanks,
> ---Brian
> 
> ==========================================
> Brian R. Poppenwimer, CNE, MCP
> popper@xxxxxxxxxxxxxxx
> Director Of Computer Operations
> Nelson & Pope
> www.nelsonpope.com
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users