Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 29 Aug 1998 09:56:27 +1000 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        kelly@plutotech.com (Sean Kelly)
Cc:        clash@tasam.com, jkb@best.com, security@FreeBSD.ORG
Subject:   Re: Shell history (Was: Re: post breakin log)
Message-ID:  <199808282358.QAA12438@hub.freebsd.org>
In-Reply-To: <35E6C761.BF4CEAA2@plutotech.com> from "Sean Kelly" at Aug 28, 98 09:06:09 am

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Sean Kelly, sie said:
> 
> > I don't know that much kernel stuff, but what if you hacked the kernel so
> > that whatever syscall opens/forks a new process will log the process name
> > and parameters?
> 
> Set
> 
> 	accounting_enable="YES"
> 
> in /etc/rc.conf.

doesn't record command line options and truncates the executables name at
8 bytes.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808282358.QAA12438>