Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Aug 1998 11:16:01 -0700
From:      Brian Behlendorf <brian@hyperreal.org>
To:        Wilson MacGyver <macgyver@cylatech.com>, security@FreeBSD.ORG
Subject:   Re: post breakin log
Message-ID:  <19980827182323.6798.qmail@hyperreal.org>
In-Reply-To: <199808270538.BAA01341@armitage.cylatech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 01:38 AM 8/27/98 -0400, Wilson MacGyver wrote:
>the log from history follows.

Is there a fool-proof way to get user histories like this?  I got one once
only because the cracker was lame enough to forget to delete his
.bash_history file.    Presuming root isn't compromised of course...

	Brian


--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
"Common sense is the collection of prejudices  |     brian@apache.org
acquired by the age of eighteen." - Einstein   |  brian@hyperreal.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980827182323.6798.qmail>