How do I tell rkhunter and chkrootkit to exclude a usb stick and /proc etc, from their scans?

winger9 · 07-25-2017, 01:40 PM

I'm going to run rkhunter and chkrootkit on my laptop from a live knoppix USB
stick.

How do I tell the two programs to exclude the USB stick and /proc etc, from
their scans?

petelq · 07-26-2017, 06:09 AM

Run

Code:

man rkhunter

or

Code:

rkhunter --help

(likewise, chkrootkit) and you get a whole list of options to choose. Your requirements will be in there if they're available.

sundialsvcs · 07-26-2017, 07:29 AM

I don't bother with hunters, but if the logic doesn't know about /proc and /sys then my opinion of it just dropped even more.