Red Hat Bugzilla – Bug 228217
/usr/bin/chkrootkit only runnable from console
Last modified: 2007-11-30 17:11:56 EST
Description of problem:
Why is /usr/bin/chkrootkit linked to /usr/bin/consolehelper?
The result is that you can't run 'chkrootkit' unless you are on the console.
Furthermore, even if you are on the console, 'chkrootkit' won't run within a
chkrootkit is exactly one of those types of programs that one would like to run
remotely to check whether a server has been hacked.
Even worse, when you run chkrootkit remotely, it just exits quietly giving the
unknowing user no indication of what is going on. Now I know that you can
alternatively just run /usr/lib/chkrootkit-0.47/chkrootkit, but the unsuspecting
user wouldn't know that and would not understand why /usr/bin/chkrootkit is not
working when not on a console.
At a minimum, if not run from the console, it should return a message
instructing the user to either run it from the console or to run
What do you get when running "which chkrootkit"?
which chkrootkit gives: /usr/bin/chkrootkit
*** Bug 228220 has been marked as a duplicate of this bug. ***
Please become superuser before running chkrootkit. For the superuser
there is a working chkrootkit in /usr/sbin/chkrootkit. Concerning
your other troubles, look into X Forwarding.
OK. I have been using 'sudo' which still uses my regular path which prioritized
I hadn't realized that there was a version in /usr/sbin/chkrootkit but that
should solve my problems...