How to install and secure egroupware - Directory UMM

6.1.3.3 Installing chkrootkit from the tar.gz file
Unpack and install Chkrootkit
“chkrootkit outpu t” to “chkrootkit myserver outpu t”
root to your_email_adress@yourserver.com
[root@server tmp]# cp chkrootkit.tar.gz /usr/local; rm chkrootkit.tar.gz
[root@server tpm]# cd /usr/local/
[root@server local]# tar xzvf chkrootkit.tar.gz
[root@server local]# mv chkrootkit-x.xx chkrootkit
[root@server local]# chown –R root.root chkrootkit
[root@server chkrootkit]# cd chkrootkit
[root@server chkrootkit]# make sense
To make chkrootkit send you the report you have two possibilities: create a chkrootkit_cronfile or add a line
to the crontab file.
To create a chkrootkit_cronfile:
[root@server cron.daily]# vi chkrootkit_cronfile
#!/bin/sh
cd /usr/local/chkrootkit ./chkrootkit 2> /dev/null | mail –s “chkrootkit myserver output” your_email_adress
Alternatively, extend the crontab file with the following line:
0 1 * * * root (cd /usr/local/chkrootkit; ./chkrootkit 2>&1 | mail –s
"chkrootkit output" your_email_adress)
Now chkrootkit will send you a report to the address above.
6.1.4 Secure server administration
If you want to administrate your server securely, use the SSH (secure shell). With SSH, all connections are
encrypted, whereas with protocols like telnet and ftp, the user accounts and passwords are transmitted
unencrypted (in clear text format). The transfer of the passwords and account information is easy to sniff for an
attacker if it is in cleartext. With the sniffed passwords, a hacker can login to your account.
Reiner Jung Install and Secure eGroupWare Page 24 of 67