3

I'm using rkhunter to check my system regularly - Sometimes rkhunter output some warnings on file changes (after update e.g.)

rkhunter gives me the new file checksum and the old one, but is there any reference, where I can check if it's the right checksum?

I found some related questions, where a reference for checksums also would help:

Any ideas?

Community
  • 1
kapsiR
  • 131

1 Answers1

0

debsums can check package files against a checksum manifest if such was shipped with the package. But as the manifest is on the same system, it is not a valid source in case you get hacked. Tripwire or aide would be better, if you store the databases somewhere that wouldn't easily get hacked in the same attack.

ptman
  • 29,862