Well, I started checking it out:
Code: Select all
[root@dedanna ~]# urpmi chrootkit
No package named chrootkit
[root@dedanna ~]# urpmq chroot -a
dchroot
fakechroot
fakechroot-debug
schroot
schroot-debug
[root@dedanna ~]# urpmi dchroot fakechroot fakechroot-debug schroot schroot-debug
To satisfy dependencies, the following packages are going to be installed:
Package Version Release Arch
(medium "Core Release (distrib1)")
btrfs-progs 0.19 1.20120328.1> i586 (suggested)
dchroot 1.4.25 1.mga2 i586
fakechroot 2.9 1.1.mga2 i586
liblvm2cmd2.02 2.02.95 1.mga2 i586 (suggested)
lvm2 2.02.95 1.mga2 i586 (suggested)
schroot 1.4.25 1.mga2 i586
(medium "Core Release Debug (distrib2)")
fakechroot-debug 2.9 1.1.mga2 i586
schroot-debug 1.4.25 1.mga2 i586
58MB of additional disk space will be used.
11MB of packages will be retrieved.
Proceed with the installation of the 8 packages? (Y/n) n
[root@dedanna ~]#
This in Mageia 2. I'm absolutely sure I've found it before. I stopped the installation of these, because I wasn't sure if they would provide the needed chrootkit or not; I do not need btrfs-progs, or lvm2, as I'm not on btrfs and lvm is just a pain in the arse to me.
I've installed rkhunter, but it's not giving me what I need for msec. On installation of it:
And, with rkhunter, what's up with all these "disabled at user's request"s? I haven't even run or configured it yet to request or not request! Shouldn't these things be on by default?
I KNOW I've had chrootkit installed to Mageia 2 already! I'm totally in mode on this, and need it! Any ideas? Is it part of one of those other packages above? I know I could run urpmq -i on each one, but,,, somehow I don't think I'd come up with anything helpful. What else can I use that will report to msec and email me?
Thanks.
Edit: In fact, eh, get it over with:
... Neither does what I need it to!