Re: commandlogging
On Mon, Mar 05, 2001 at 09:12:36AM -0500, Steve M. Robbins wrote:
> There is a package "snoopy" that uses a preloaded shared library to
> log each "exec()" call before performing it. If it is not yet in
> Debian, you can get a package from
>
> deb-src http://www.punknews.org/debian ./
If someone wanted to, they could run commands without them getting logged
by snoopy. All you need to do is statically link the program that calls exec.
It would probably be easy to put a printk in the kernel's execve() handler,
though, and AFAIK that would get everything.
--
#define X(x,y) x##y
Peter Cordes ; e-mail: X(peter@llama.nslug. , ns.ca)
"The gods confound the man who first found out how to distinguish the hours!
Confound him, too, who in this place set up a sundial, to cut and hack
my day so wretchedly into small pieces!" -- Plautus, 200 BCE
Reply to: