From owner-freebsd-security Sun Aug 30 11:11:19 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA16082 for freebsd-security-outgoing; Sun, 30 Aug 1998 11:11:19 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from ns2.sminter.com.ar (ns2.sminter.com.ar [200.10.100.11]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA16072 for ; Sun, 30 Aug 1998 11:11:11 -0700 (PDT) (envelope-from Recabarren!fpscha@ns2.sminter.com.ar) Received: (from uucp@localhost) by ns2.sminter.com.ar (8.8.5/8.8.4) id PAA26212 for FreeBSD.ORG!security; Sun, 30 Aug 1998 15:07:44 -0300 (GMT) >Received: (from fpscha@localhost) by localhost.schapachnik.com.ar (8.8.8/8.8.5) id AAA02566; Sun, 30 Aug 1998 00:53:39 -0300 (ART) From: "Fernando P. Schapachnik" Message-Id: <199808300353.AAA02566@localhost.schapachnik.com.ar> Subject: Re: Shell history (Was: Re: post breakin log) In-Reply-To: from "Jan B. Koum" at "Aug 28, 98 03:11:19 pm" To: jkb@best.com (Jan B. Koum) Date: Sun, 30 Aug 1998 00:53:38 -0300 (ART) Cc: security@FreeBSD.ORG Reply-To: fpscha@schapachnik.com.ar X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=ISO-8859-1 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org En un mensaje anterior Jan B. Koum escribió: > > cat /dev/null > typescript What about chflaging typescript to append only? > > -- Yan > > www.best.com/~jkb/ Unix users of the world unite: > www.{free,open,net}bsd.org | www.linux.org | www.apache.org | www.perl.com > "Turn up the lights, I don't want to go home in the dark." > > On Fri, 28 Aug 1998, Zahemszky Gabor wrote: > > >> > >> This is assuming intruder will not try to change shell, turn off > >> history within the shell and is in general pretty clueless when it comes > >> to shell history. :) > >> A friend of mine came up with an idea to create a shell which > >> would log everything a user does.. not via shell history mechanism, but > >> rather ala watch(8). Everything user types would go into some files > >> somewhere. Then again, nothing ever came out of it. > > > >man script > > > >ZGabor at CoDe dot HU > > > >-- > >#!/bin/ksh > >Z='21N16I25C25E30, 40M30E33E25T15U!' ;IFS=' ABCDEFGHIJKLMNOPQRSTUVWXYZ ';set $Z ;for i { [[ $i = ? ]]&&print $i&&break;[[ $i = ??? ]]&&j=$i&&i=${i%?};typeset -i40 i=8#$i;print -n ${i#???};[[ "$j" = ??? ]]&&print -n "${j#??} "&&j=;typeset +i i;};IFS=' 0 123456789 ';set $Z;X=;for i { [[ $i = , ]]&&i=2;[[ $i = ?? ]]||typeset -l i;X="$X $i";typeset +l i;};print "$X" > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > Fernando P. Schapachnik fpscha@schapachnik.com.ar To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message