Date: Sun, 30 Aug 1998 00:53:38 -0300 (ART) From: "Fernando P. Schapachnik" <fpscha@localhost.schapachnik.com.ar> To: jkb@best.com (Jan B. Koum) Cc: security@FreeBSD.ORG Subject: Re: Shell history (Was: Re: post breakin log) Message-ID: <199808300353.AAA02566@localhost.schapachnik.com.ar> In-Reply-To: <Pine.BSF.4.02A.9808281510000.17350-100000@shell6.ba.best.com> from "Jan B. Koum" at "Aug 28, 98 03:11:19 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
En un mensaje anterior Jan B. Koum escribió:
>
> cat /dev/null > typescript
What about chflaging typescript to append only?
>
> -- Yan
>
> www.best.com/~jkb/ Unix users of the world unite:
> www.{free,open,net}bsd.org | www.linux.org | www.apache.org | www.perl.com
> "Turn up the lights, I don't want to go home in the dark."
>
> On Fri, 28 Aug 1998, Zahemszky Gabor wrote:
>
> >>
> >> This is assuming intruder will not try to change shell, turn off
> >> history within the shell and is in general pretty clueless when it comes
> >> to shell history. :)
> >> A friend of mine came up with an idea to create a shell which
> >> would log everything a user does.. not via shell history mechanism, but
> >> rather ala watch(8). Everything user types would go into some files
> >> somewhere. Then again, nothing ever came out of it.
> >
> >man script
> >
> >ZGabor at CoDe dot HU
> >
> >--
> >#!/bin/ksh
> >Z='21N16I25C25E30, 40M30E33E25T15U!' ;IFS=' ABCDEFGHIJKLMNOPQRSTUVWXYZ ';set $Z ;for i { [[ $i = ? ]]&&print $i&&break;[[ $i = ??? ]]&&j=$i&&i=${i%?};typeset -i40 i=8#$i;print -n ${i#???};[[ "$j" = ??? ]]&&print -n "${j#??} "&&j=;typeset +i i;};IFS=' 0
123456789 ';set $Z;X=;for i { [[ $i = , ]]&&i=2;[[ $i = ?? ]]||typeset -l i;X="$X $i";typeset +l i;};print "$X"
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>
Fernando P. Schapachnik
fpscha@schapachnik.com.ar
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808300353.AAA02566>