RKHunter stands for Rootkit Hunter or RootKit. RootKit is a feature rich scanning tool that scans for rootkits, backdoors, and local exploits. It’s one of the most powerful applications that you can install easily on your web hosting account.
As rootkits are installed into system files they cannot be removed easily however, RKHunter will still notify you of any rootkits that may exist in your system so that you can take the necessary steps to reload on any of your hosting server. One of the best features of RKHunter is that for the end user it is possible to configure it on a daily basis, The reason experts recommend RKHunter is because it ensures that the rootkits are not affecting your server.
Follow steps mentioned below to install RKHunter on Server:-
Step 1:- Login to your server if you enter via SSH as root and enter the command mentioned below on your server to download the application
The required file can be extracted by the following command:
tar -xzf rkhunter-1.3.2.tar.gz
The command mentioned below will first change the folder location, then it will install the application on your web hosting server
Step 2:- As soon as you install RKHunter on you server, the end user can schedule it to do daily scans as per the requirement. In order to update the server itself on a regular basis you must configure RKHunter to schedule the process on daily scan.
Following steps can be followed for that:
a) vi /etc/cron.daily/rkhunter.sh (press ’shift + I’ to make the file editable)
b) (/usr/local/bin/rkhunter –update && /usr/local/bin/rkhunter -c –cronjob 2>&1 | mail -s “RKhunter Scan Details” [email protected]) – (make sure you replace the [email protected] with your own email address)
c) press ‘esc’ and then type ‘:wq’, and your file will be saved
d) chmod 700 /etc/cron.daily/rkhunter.sh
Once the RKHunter is configured on your server the user will get an automated report on his desired email id and the scripts will also be checked for latest updates of RKHunter.