Thank Richard,
I will do some tests with the diff mode.
For now, I changed /etc/chkrootkit/chkrootkit.conf:
MAILTO="journal"
- and added this on "/usr/sbin/chkrootkit-daily":
if [ "$MAILTO" = "journal" ]; then
logger --file "$FILE"
else
mail -s "$SUBJECT" "$MAILTO" < "$FILE"
fi
for send the output to the journal.
Il 27/03/23 22:19, Richard Lewis ha scritto:
On Mon, 27 Mar 2023, 18:55 Antonio, <antde...@gmail.com> wrote:
Because every morning I receive an email from
"/etc/cron.daily/chkrootkit" that informs me of this.
Of course I can deactivate the check but I would not like to lose
other useful information for the security of the system.
And if you read /etc/chkrootkit/chkrootkit.conf you will find there
are various ways to stop that happening (without deactivating
anything). look for the bit about diff mode.
