How To Install chkboot on Kali Linux

In this tutorial we learn how to install chkboot on Kali Linux. chkboot is detection of malicious changes for boot files

Introduction

In this tutorial we learn how to install chkboot on Kali Linux.

What is chkboot

chkboot is:

chkboot is a set of scripts that will display a notification (console or graphical) when boot files are tempered with.

This tool is indented to be used on encrypted disks. In order to get the operating system to run, parts of the boot process must remains un-encrypted. chkboot checks that those files have not changed between reboots.

Since the scripts and the data they generate are stored on the encrypted part of the disk, any attempts to modify the boot partition between reboots will be detected.

Please note that this tool is not effective against rootkit that hides every boot files modifications or prevents chkboot from functioning properly.

There are three methods to install chkboot on Kali Linux. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install chkboot Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install chkboot using apt-get by running the following command:

sudo apt-get -y install chkboot

Install chkboot Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install chkboot using apt by running the following command:

sudo apt -y install chkboot

Install chkboot Using aptitude

If you want to follow this method, you might need to install aptitude on Kali Linux first since aptitude is usually not installed by default on Kali Linux. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install chkboot using aptitude by running the following command:

sudo aptitude -y install chkboot

How To Uninstall chkboot on Kali Linux

To uninstall only the chkboot package we can use the following command:

sudo apt-get remove chkboot

Uninstall chkboot And Its Dependencies

To uninstall chkboot and its dependencies that are no longer needed by Kali Linux, we can use the command below:

sudo apt-get -y autoremove chkboot

Remove chkboot Configurations and Data

To remove chkboot configuration and data from Kali Linux we can use the following command:

sudo apt-get -y purge chkboot

Remove chkboot configuration, data, and all of its dependencies

We can use the following command to remove chkboot configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge chkboot

Dependencies

chkboot have the following dependencies:

References

Summary

In this tutorial we learn how to install chkboot package on Kali Linux using different package management tools: apt, apt-get and aptitude.