Linux workstation

Upstream software project

chkrootkit

Tool to locally check for signs of a rootkit

About chkrootkit

Tool to locally check for signs of a rootkit

This project links 3 native package records across 3 recorded operating-system releases. Compare the retained versions and architectures below, then open the package for your own release.

These are catalog observations, not a guarantee of installation, compatibility, or upstream support.

Visit project website

Project pictures and package coverage

Debian 12 (Bookworm): 1 package records; Fedora 43: 1 package records; Fedora 44: 1 package records. Catalog coverage diagram, not an application screenshot.chkrootkit: recorded package coverageDebian 12 (Bookworm)1 recordsFedora 431 recordsFedora 441 records
OpenFactory diagram of linked package records. It is not an application screenshot.

Project identity

Project
chkrootkit
Publisher
Not authoritatively mapped
Native package records
3
Operating systems
debian-12, fedora-43, fedora-44
License expression
BSD-2-Clause AND GPL-2.0-or-later
Metadata completeness
100/100 (not a software quality rating)
Homepage
Visit upstream site
Source repository
Not reported

Source-reported description

The fullest retained description is shown with its source. Distribution packaging descriptions may include downstream details.

chkrootkit is a tool to locally check for signs of a rootkit. It contains: * chkrootkit: shell script that checks system binaries for rootkit modification. * ifpromisc: checks if the network interface is in promiscuous mode. * chklastlog: checks for lastlog deletions. * chkwtmp: checks for wtmp deletions. * chkproc: checks for signs of LKM trojans. * chkdirs: checks for signs of LKM trojans. * strings: quick and dirty strings replacement. * chkutmp: checks for utmp deletions.

Description source

Packages by operating system

Compare recorded versions, then open a package for dependency, file, checksum, and repository evidence. Version strings are distribution-specific, not a ranking of newer software.

Debian 12 (Bookworm)

  1. chkrootkit

    Debian 12 (Bookworm) / misc / source chkrootkit

    0.57-2+b9

    rootkit detector

    amd64arm64bookworm

Fedora 43

  1. chkrootkit

    Fedora 43 / Unspecified / source chkrootkit

    0.58-1b.fc43

    Tool to locally check for signs of a rootkit

    aarch64x86_6443

Fedora 44

  1. chkrootkit

    Fedora 44 / Unspecified / source chkrootkit

    0.58-3b.fc44

    Tool to locally check for signs of a rootkit

    aarch64x86_6444

Project resources and further reading

Mapping provenance

Only source-backed identity signals create public cross-OS links. A reviewer can later approve or dispute an inferred relationship without rewriting native package history.

No field-level source record is published yet.