Hi,

I wanted to write a script which would check the hash-sums of all files within a certain directory and compare them with previous hashes. I remembered that rkhunter does this by default for certain files. So my idea was to use rkhunter for this task. I copied the default configuration file and made some modifications to it. However, I just cannot get it to work. It always just computes the hashes for files in /bin /usr/bin etc. But I would like to also check the files, e.g. in /boot.

Is there any way to configure rkhunter to compute and store hashes for *normal* (i.e. non-executable) files?

Maybe you could try aide .. it's designed for the job.

1 members found this post helpful.

@kbp: Thanks for the hint. Looks like aide is a good alternative to what I am trying to do.