RE: [cobalt-users] Cron ChkrootKit

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

<snip>
> > what is the output of
> > crontab -l
> >
> > You did make a script, that crontab calls,  didn't you?
> > And how about giving us a look at the script.
> 
> [root /root]# crontab -l
> no crontab for root
> [root /root]#
> 
> 
> [root cron.daily]#pico chkrootkit.sh
> 
> #!/bin/sh
> cd /home/tools/chkrootkit/
> ./chkrootkit > /root/chkrootkit.out
> mail me@xxxxxxxxxxxx -s "Hacking Check" -c someoneelse@xxxxxxxxxxxx <
> /root/$
> 
</snip>


Okay, so where did you put the script into cron?? Is it in /etc/crontab or in one of the cron.daily or whatever directories??
If its /etc/crontab, can you copy the line entered, as i'm guessing Gerald's also thinking its a problem with the entry for cron.

Regards,

Andy
andy@xxxxxxxxxxxxxxx
http://www.raqpak.com/ <-- Raq/Qube unofficial PKGs and support advice