Please refer the following steps:
- Login to your server as root.
- Download latest version of rootcheck to the server.
wget https://www.ossec.net/rootcheck/files/rootcheck-2.4.tar.gz
- Verify its checksum for security
wget https://www.ossec.net/rootcheck/files/rootcheck-2.4_checksum.txt
cat rootcheck-2.4_checksum.txt
md5 rootcheck-2.4.tar.gz
sha1 rootcheck-2.4.tar.gz
The entries should match the corresponding checkum entries in the text file.
- Extract the contents to the server.
tar -zxvf rootcheck-2.4.tar.gz
- Execute the following commands for the installation of rootcheck
cd rootcheck-2.4
make all
- Run root check.
Once it completely scan’s the server, you should view the results, after that further actions can be taken.