How to Use Rootkit Hunter (rkhunter) on AlmaLinux 8

a) Installing Rootkit Hunter

Install Rootkit Hunter which is available as rkhunter package.
sudo dnf install rkhunter

b) Updating Database

Before using, you need to update the database of Rootkit Hunter.
sudo rkhunter --update
With the database files refreshed, you can set your baseline file properties so that Rootkit Hunter can alert you if any of the essential configuration files it tracks are altered. Tell Rootkit Hunter to check the current values and store them as known-good values:
sudo rkhunter --propupd

c) Scanning

Start scanning your lovely system.
sudo rkhunter --check


Documentation

Leave a Reply