• eldain@feddit.nl
    link
    fedilink
    arrow-up
    2
    ·
    1 个月前

    I always wondered, did anyone ever find something with it? Wouldn’t a rootkit that is known enough to be in the detection file be outdated? But yes, you read the docs, points to you!

    • redsand@lemmy.dbzer0.combanned_from_community_badge
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 个月前

      Yeah rkhunter looks for all the common kits BUT ALSO checks for suspicious changes if enabled as a service.