From 3dea7b1eea1756cdd7fb8b01d4901e1bb94023fb Mon Sep 17 00:00:00 2001 From: Kristopher Date: Tue, 1 Jul 2025 07:57:38 -0700 Subject: [PATCH] chkrootkit: add page (#17016) Co-authored-by: Managor <42655600+Managor@users.noreply.github.com> Co-authored-by: Dylan <145150333+dmmqz@users.noreply.github.com> Co-authored-by: Wiktor Perskawiec --- pages/common/chkrootkit.md | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 pages/common/chkrootkit.md diff --git a/pages/common/chkrootkit.md b/pages/common/chkrootkit.md new file mode 100644 index 0000000000..085527097e --- /dev/null +++ b/pages/common/chkrootkit.md @@ -0,0 +1,36 @@ +# chkrootkit + +> Scan system for rootkits. +> More information: . + +- Enable [q]uiet mode and suppress normal test results: + +`chkrootkit -q` + +- Enable e[x]pert mode and produce additional outputs: + +`chkrootkit -x` + +- Enable [d]ebug mode to show all output: + +`chkrootkit -d` + +- Specify [e]xcluded files for some tests: + +`chkrootkit -e "{{path/to/file}}"` + +- Specify a directory as the [r]oot for testing (e.g. mounted `ext` drives): + +`chkrootkit -r {{path/to/directory}}` + +- Ignore [n]fs-mounted directories: + +`chkrootkit -n` + +- Invoke [T]ests and ignore specific filesystem types: + +`chkrootkit -T {{filesystemtype}}` + +- Generate [l]ist of available tests: + +`chkrootkit -l`