To determine if you have a rootkit on your Linux system, you must view the security report. To look at any Tiger security report, open up a terminal and use the CD command to move into /var/log/tiger. Note: Linux will not let non-root users in /var/log. You must use su.