Feb 27, 2016
Linux
How to Install and Use Rkhunter (Rootkit Hunter) on Linux Servers (2026)
Install rkhunter from your distribution's packages ( dnf install rkhunter from EPEL on AlmaLinux, Rocky Linux and CloudLinux, or apt install rkhunter on Debian and Ubuntu). Then update its data files with rkhunter --update, record a baseline of your system files with rkhunter --propupd, and scan with rkhunter --check --sk. Set an email address for warnings and let the daily cron job run. Run --propupd again after every system update, or you will get false warnings.