RE: [cobalt-users] Cron ChkrootKit

[twooly@xxxxxxxxx]

> <snip>
> > > what is the output of
> > > crontab -l
> > >
> > > You did make a script, that crontab calls,  didn't you?
> > > And how about giving us a look at the script.
> > 
> > [root /root]# crontab -l
> > no crontab for root
> > [root /root]#
> > 
> > 
> > [root cron.daily]#pico chkrootkit.sh
> > 
> > #!/bin/sh
> > cd /home/tools/chkrootkit/
> > ./chkrootkit > /root/chkrootkit.out
> > mail me@xxxxxxxxxxxx -s "Hacking Check" -c someoneelse@xxxxxxxxxxxx <
> > /root/$
> > 
> </snip>
> 
> 
> Okay, so where did you put the script into cron?? Is it in /etc/crontab or in 
> one of the cron.daily or whatever directories??
> If its /etc/crontab, can you copy the line entered, as i'm guessing Gerald's 
> also thinking its a problem with the entry for cron.
> 
> Regards,
> 

It is in the /etc/cron.daily.