Configure rkhunter on Slackware

1. When to use it

Useful as an additional check on exposed servers, especially if you want recurring and readable scans.

2. Base setup

rkhunter --update
rkhunter --propupd
rkhunter --check --sk

Adjust host names, IPs, interfaces, paths, and versions to the real system before making the change persistent.

3. Quick verification

grep -n 'Warning' /var/log/rkhunter.log | head
tail -n 20 /var/log/rkhunter.log
ls -l /var/log/rkhunter.log

Confirm that the output matches the expected state before considering the intervention complete.

4. Operational notes

Before automating alerts, eliminate the obvious false positives, otherwise reports end up being ignored.

Quick checklist

[ ] Steps completed\n[ ] Config updated\n[ ] Tests executed\n[ ] Rollback ready\n[ ] Logs checked

Back to Linux HowTo