src/rootcheck/rootcheck.conf

   1 <rootcheck>
   2   <skip_nfs>no</skip_nfs>
   3   <rootkit_files>./db/rootkit_files.txt</rootkit_files>
   4   <rootkit_trojans>./db/rootkit_trojans.txt</rootkit_trojans>
   5
   6   <system_audit>./db/system_audit_rcl.txt</system_audit>
   7   <system_audit>./db/cis_debian_linux_rcl.txt</system_audit>
   8   <system_audit>./db/cis_rhel_linux_rcl.txt</system_audit>
   9   <system_audit>./db/cis_rhel5_linux_rcl.txt</system_audit>
  10   <windows_audit>./shared/win_audit_rcl.txt</windows_audit>
  11   <windows_apps>./shared/win_applications_rcl.txt</windows_apps>
  12   <windows_malware>./shared/win_malware_rcl.txt</windows_malware>
  13
  14   <check_files>yes</check_files>
  15   <check_trojans>yes</check_trojans>
  16
  17   <check_unixaudit>yes</check_unixaudit>
  18   <check_winapps>yes</check_winapps>
  19   <check_winaudit>yes</check_winaudit>
  20   <check_winmalware>yes</check_winmalware>
  21
  22   <check_dev>yes</check_dev>
  23   <check_sys>yes</check_sys>
  24   <check_pids>yes</check_pids>
  25   <check_ports>yes</check_ports>
  26   <check_if>yes</check_if>
  27 </rootcheck>