From owner-freebsd-stable@FreeBSD.ORG  Tue Jun  8 15:51:58 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8D87E16A4CE
	for <freebsd-stable@freebsd.org>;
	Tue,  8 Jun 2004 15:51:58 +0000 (GMT)
Received: from freebsd.takeda.tk (node-402413e2.sna.onnet.us.uu.net
	[64.36.19.226])	by mx1.FreeBSD.org (Postfix) with ESMTP id AD55043D1F
	for <freebsd-stable@freebsd.org>;
	Tue,  8 Jun 2004 15:51:53 +0000 (GMT)
	(envelope-from takeda@takeda.tk)
Received: from takeda.lan (takeda.lan [10.0.0.3])
	by freebsd.takeda.tk (8.12.11/8.12.11) with ESMTP id i58FpYA0083070;
	Tue, 8 Jun 2004 08:51:42 -0700 (PDT)
	(envelope-from takeda@takeda.tk)
Date: Tue, 8 Jun 2004 08:51:17 -0700
From: Dariusz Kulinski <takeda@takeda.tk>
X-Mailer: The Bat! (v2.01)
X-Priority: 3 (Normal)
Message-ID: <5950981562.20040608085117@takeda.tk>
To: "Daniel O'Connor" <doconnor@gsoft.com.au>
In-Reply-To: <200406081707.13629.doconnor@gsoft.com.au>
References: <5719057546.20040607235913@takeda.tk>
 <000001c44d26$bc22a6a0$1414a8c0@kyle> <18919733703.20040608001030@takeda.tk>
 <200406081707.13629.doconnor@gsoft.com.au>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: freebsd-stable@freebsd.org
cc: Kyle Mott <kyle@xraided.net>
Subject: Re: Viewing SSH Connection
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Jun 2004 15:51:58 -0000

Hello Daniel,

Tuesday, June 8, 2004, 12:37:13 AM, you wrote:

> If someone has root then you couldn't prevent them using watch, simple as
> that.
> (They might have to reboot first but..)

That's true...

He would need to set securelevel in i.e. rc.conf and then do schg on
all rc files, but that still would allow to use it for person who have
physical access to the machine.

-- 
Best regards,
 Dariusz                            mailto:takeda@takeda.tk
CCNA, SCSA, SCNA, LPIC, MCP certified
http://www.takeda.tk