LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   How do I specify the location for lastlog for chkrootkit? (https://www.linuxquestions.org/questions/linux-software-2/how-do-i-specify-the-location-for-lastlog-for-chkrootkit-633486/)

abefroman 04-06-2008 02:10 PM

How do I specify the location for lastlog for chkrootkit?
 
How do I specify the location for lastlog for chkrootkit?

When I run chklastlog, it trying to look at /var/adm/lastlog and not /var/log/lastlog
# ./chklastlog
unable to open lastlog-file /var/adm/lastlog

How do I get it to look in /var/log/lastlog ?

TIA

bigrigdriver 04-07-2008 07:33 AM

You may have a configuration file somewhere in which you can specify the log file name and location. You may also have to specify the log file name and location as an installation option.

I don't know. I don't use chkrootkit. I would first look into chkrootkit installation instructions to try to resolve this question.

Edit: I've just looked into the source code. The lastlog location is hard coded in chklastlog.c.

So, if you installed from rpm, you're stuck with it unless you get a .src.rpm, edit the file named above, and conpile your own rpm.

Or, you can get the tarball and edit the file, then use checkinstall to build an rpm for you when you compile the source code.

unSpawn 04-08-2008 08:58 AM

Else try creating a link from /var/adm to /var/log?


All times are GMT -5. The time now is 04:26 AM.