Vulnerability Development mailing list archives

Re: History Files


From: jen () ETTNET SE (Joel Eriksson)
Date: Mon, 17 Apr 2000 12:35:19 +0200


On Sun, Apr 16, 2000 at 12:07:02PM -0700, Mark Rafn wrote:
From a pure-technical end, even if you could find a way to keep them from
telling bash to log to a "safe" place, they can always do
  while :; do read x; eval $x; done
and bash will not log what that loop does.

If you want to do this right, do it with a sniffer.

Nah, what about encryption? You're using SSH, right? :-) Patching the
daemons or shells to work as a multiplexer of all input/output is the
right way to go (except for when users transfers programs to the box,
executes them and erases them of course).

--
Mark Rafn    dagon () dagon net    <http://www.dagon.net/>   !G

--
Joel Eriksson



Current thread: