Date: Fri, 28 Aug 1998 09:06:09 -0600 From: Sean Kelly <kelly@plutotech.com> To: Joe Gleason <clash@tasam.com> Cc: "Jan B. Koum" <jkb@best.com>, security@FreeBSD.ORG Subject: Re: Shell history (Was: Re: post breakin log) Message-ID: <35E6C761.BF4CEAA2@plutotech.com> References: <002001bdd242$f1e3baf0$f10408d1@bug.tasam.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> I don't know that much kernel stuff, but what if you hacked the kernel so > that whatever syscall opens/forks a new process will log the process name > and parameters? Set accounting_enable="YES" in /etc/rc.conf. --Sean To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35E6C761.BF4CEAA2>