By the way, I use a directory called "modules", which you may not use. Make sure to use the correct path to chkrootkit-0.37 for your machine.
-Gary |You need "root" between * and (cd...) I keep my "2<&1" piece where you |had it originally. | |In /etc/crontab: | |# Check for Root Kit at 11:15 AM each day |15 11 * * * root (cd |/home/sites/home/users/admin/modules/chkrootkit-0.37; ./chkrootkit 2>&1 || mail -s "chkrootkit output" admin) | |Make the change, restart the service, and watch it work. :) | |-Gary | | ||-----Original Message----- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]] On Behalf Of ||Gerald Waugh ||Sent: Wednesday, September 25, 2002 10:57 AM ||To: [EMAIL PROTECTED] ||Subject: Re: [cobalt-security] cron and chkrootkit || || ||On Wed, 25 Sep 2002, njd 76 wrote: || ||> ||> No i did not do that in the past but i tried it today and it ||did not work. ||> At 1:35 i wanted to run it as a test. I had the following in the ||> /etc/crontab ||> ||> 00 13:35 * * * (cd /home/sites/home/users/admin/chkrootkit-0.37; ||> ./chkrootkit | mail -s "chkrootkit output" root 2>&1) || ||minute(s) hour(s) day(s) month(s) weekday(s) command(s) || 35 13 * * * || ||You didn't put the time in correctly... || ||What does crontab -l say || ||Gerald ||-- ||http://frontstreetnetworks.com | http://raqware.com ||Front Street Networks LLC | Phone: +1 203-785-0699 ||229 Front Street, Ste. C, New Haven, CT. 06513-3203 || ||_______________________________________________ ||cobalt-security mailing list ||[EMAIL PROTECTED] ||http://list.cobalt.com/mailman/listinfo/cobalt-security || || | |_______________________________________________ |cobalt-security mailing list |[EMAIL PROTECTED] |http://list.cobalt.com/mailman/listinfo/cobalt-security | _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
