Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 May 2000 12:49:04 -0700
From:      Alfred Perlstein <bright@wintelcom.net>
To:        "Aleksandr A.Babaylov" <babolo@links.ru>
Cc:        sh_fazelian@yahoo.com, hackers@FreeBSD.ORG
Subject:   Re: please hellllllllllllp me!
Message-ID:  <20000522124904.V28097@fw.wintelcom.net>
In-Reply-To: <200005221457.SAA17979@aaz.links.ru>; from babolo@links.ru on Mon, May 22, 2000 at 06:57:05PM %2B0400
References:  <20000522025901.T28097@fw.wintelcom.net> <200005221457.SAA17979@aaz.links.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
* Aleksandr A.Babaylov <babolo@links.ru> [000522 08:30] wrote:
> Alfred Perlstein writes:
> > > 2- how I can write somthing in a file that nobody can
> > > see them
> > > my mean: in crontab adding some command that this is
> > > hidden.
> > impossible(*) afaik.
> possible if use similar to linux emulator method
> to redirect open(2) - but it is TOO expansive
> and kernel need to be changed IMHO for this

Why not just trojan cron or any other deamon to periodically execute
some program?

After a compromise it's best to just reinstall and audit the rest of
your machines.

-- 
-Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org]
"I have the heart of a child; I keep it in a jar on my desk."


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000522124904.V28097>