rkhunter Cookbook

A Chef cookbook for installing and configuring rkhunter

Requirements

Chef.

Platforms

So far, only tested with a Debian 6 Vagrant Box.

Attributes

rkhunter::default

<table>
<tr>
<th>Key</th>
<th>Type</th>
<th>Description</th>
<th>Default</th>
</tr>
<tr>
<td><tt>['rkhunter']['cron_daily_run']</tt></td>
<td>Boolean</td>
<td>whether to run daily</td>
<td><tt>true</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['cron_db_update']</tt></td>
<td>Boolean</td>
<td>whether to update db weekly</td>
<td><tt>true</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['db_update_email']</tt></td>
<td>Boolean</td>
<td>enable reports of weekly database updates</td>
<td><tt>true</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['report_email']</tt></td>
<td>String</td>
<td>email address to report to</td>
<td><tt>root</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['apt_autogen']</tt></td>
<td>Boolean</td>
<td>enable automatic database updates</td>
<td><tt>false</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['nice']</tt></td>
<td>String</td>
<td>niceness of run-level</td>
<td><tt>0</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['run_check_on_battery']</tt></td>
<td>String</td>
<td>potentially run while on battery</td>
<td><tt>false</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['allow_ssh_root_user']</tt></td>
<td>String</td>
<td>proper configuration of SSHD's PermitRootLogin option</td>
<td><tt>no</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['scriptwhitelist']</tt></td>
<td>Array</td>
<td>paths to commands which are allowed to be scripts</td>
<td><tt>[]</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['allowhiddendir']</tt></td>
<td>Array</td>
<td>paths to hidden directories for whitelisting</td>
<td><tt>[]</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['allowhiddenfile']</tt></td>
<td>Array</td>
<td>paths to hidden files for whitelisting</td>
<td><tt>[]</tt></td>
</tr>
<tr>
<td><tt>['rkhunter']['port_whitelist']</tt></td>
<td>Array</td>
<td>paths and/or network ports to whitelist</td>
<td><tt>[]</tt></td>
</tr>
</table>

Usage

Just include rkhunter in your node's run_list OR create a simple role:

name "rkhunter"
description "rkhunter config"
run_list(
    "recipe[rkhunter]",
)

default_attributes(
    :rkhunter => { :db_update_email => "true",
                   :report_email => "your@email.com" }
)

Contributing

1. Fork the repository on Github
2. Create a named feature branch (like add_component_x)
3. Write your change
4. Write tests for your change (if applicable)
5. Run the tests, ensuring they all pass
6. Submit a Pull Request using Github

License and Authors

License: Apache
Authors: Greg Palmier