NAME
chkrootkit – Determine whether the system is infected with a rootkitSYNOPSIS
chkrootkit [OPTION]… [TESTNAME]…DESCRIPTION
chkrootkit examines certain elements of the target system and determines whether they have been tampered with. Some tools which chkrootkit applies while analyzing binaries and log files can be found at //usr/lib/chkrootkit.OPTIONS
- -h
- Print a short help message and exit.
- -V
- Print version information and exit.
- -l
- Print available tests.
- -d
- Enter debug mode.
- -x
- Enter expert mode.
- -e
- Exclude known false positive files/dirs, quoted, space separated.
- -q
- Enter quiet mode.
- -r dir
- Use dir as the root directory.
- -p dir1:dir2:dirN
- Specify the path for the external commands used by chkrootkit.
- -n
-
skip NFS mounted dirs
Willie
Willie has over 15 years of experience in Linux system administration and DevOps. After managing infrastructure for startups and enterprises alike, he founded Command Linux to share the practical knowledge he wished he had when starting out. He oversees content strategy and contributes guides on server management, automation, and security.