Re: [cobalt-users] Cron ChkrootKit

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Sun, 28 Jul 2002, Todd W wrote:

> > > It just repeats this two times in the email
> > > run-parts /etc/cron.daily
> > > /usr/bin/find: //proc/6/fd: Permission denied
> > > /usr/bin/find: //proc/6/fd: Permission denied
> > >
> [root /root]# crontab -l
> no crontab for root
> [root /root]#
>
> [root cron.daily]#pico chkrootkit.sh
>
> #!/bin/sh
> cd /home/tools/chkrootkit/
> ./chkrootkit > /root/chkrootkit.out
> mail me@xxxxxxxxxxxx -s "Hacking Check" -c someoneelse@xxxxxxxxxxxx <
> /root/$
get rid of that 'mail' line and try this (one line)
cat /root/chkrootkit.out |  mail me@xxxxxxxxxxxx -s "Hacking Check" -c
someoneelse@xxxxxxxxxxxx

or use this script
> #!/bin/sh
> cd /home/tools/chkrootkit/
./chkrootkit | mail -s "Hacking Check" me@xxxxxxxxxxxx -c someoneelse@xxxxxxxxxxxx

--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 203-785-0699 | fax +1 203-785-1787