Re: history files

From: Wojtek Walczak (gminick@hacker.pl)
Date: 12/27/02 

From: Wojtek Walczak <gminick@hacker.pl>
Date: Fri, 27 Dec 2002 08:50:18 +0000 (UTC)

Dnia Fri, 27 Dec 2002 05:20:44 GMT, root napisa³(a):
> I believe that some of the history files are being modified on one of
> our servers. How can I prevent, or tell for sure if this is happening.
Use hidden logging ;) You need to apply some patches to your shells.
Here's one for zsh:
<http://gminick.linuxsecurity.pl/pliki/old/tools/zsh-hidden-log.patch>

Here's one for bash:
<ftp://213.146.38.147/pub/bash-2.05-backup_history.patch>

HTH. 

-- 
[ ] gminick (at) underground.org.pl  http://gminick.linuxsecurity.pl/ [ ]
[ "Po prostu lubie poranna samotnosc, bo wtedy kawa smakuje najlepiej." ]

Relevant Pages

  • Re: Restricting access to a web server by IP
    ... > remote control clients, etc - we remotely ... > The agrument against is that mpst vulnerabilities seem to come through ... > servers, and blocking access to all IPs accept those on the allowed list - ...
    (comp.security.misc)
  • Re: Restricting access to a web server by IP
    ... > remote control clients, etc - we remotely ... > The agrument against is that mpst vulnerabilities seem to come through ... > servers, and blocking access to all IPs accept those on the allowed list - ...
    (comp.security.firewalls)
  • Re: Restricting access to a web server by IP
    ... > remote control clients, etc - we remotely ... > The agrument against is that mpst vulnerabilities seem to come through ... > servers, and blocking access to all IPs accept those on the allowed list - ...
    (alt.computer.security)
  • Re: Forest to Child -- Permissions
    ... My account can login to all the DCs and has full administrator priv. ... first DC in the root. ... the member servers only ... never happen unless some admin has been mucking about. ...
    (microsoft.public.windows.server.dns)
  • Re: United States Says No! Internet is Ours!
    ... > "The internet is controlled to a large extent by the 'root servers'; ... the set of root name servers. ... > make an annual extortion payment required by ICANN which goes to fund ... > ICANN _could_ have written contracts for users with some protections ...
    (comp.dcom.telecom)