Which file is used to configure rkhunter?

The correct answer is A. /etc/rkhunter.conf. /etc/rkhunter.conf is the primary configuration file for rkhunter (Rootkit Hunter), the Linux security scanner used to detect rootkits, backdoors, and local exploits - this is consistent across all major distributions and documented in rkhunter's own --config-check flag output…

Host Security

Question

Options

A/etc/rkhunter.conf
B/etc/audit/auditd.conf
C/etc/aide/aide.conf
D/etc/maldet.conf

How the community answered

(24 responses)

A
88% (21)
C
8% (2)
D
4% (1)

Explanation

/etc/rkhunter.conf is the primary configuration file for rkhunter (Rootkit Hunter), the Linux security scanner used to detect rootkits, backdoors, and local exploits - this is consistent across all major distributions and documented in rkhunter's own --config-check flag output.

The distractors each belong to different security tools:

B (/etc/audit/auditd.conf) configures auditd, the Linux Audit daemon for system call logging.
C (/etc/aide/aide.conf) configures AIDE (Advanced Intrusion Detection Environment), a file integrity checker.
D (/etc/maldet.conf) configures Linux Malware Detect (LMD/maldet), a malware scanner.

Memory tip: Think of the pattern - most Linux tools follow the convention tool-name → /etc/tool-name.conf. For rkhunter, that maps directly to /etc/rkhunter.conf. If you can name the tool, you can name the config file.

Topics

#rkhunter#rootkit detection#host configuration#security tools

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice