Installing chkrootkit "might" be able to tell you when wtmp has something delete in it. I am saying might because there might be another way to cover that too.
_Thanks Richard --- Fajar Priyanto <[EMAIL PROTECTED]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Dear all, > Is it possible to erase activities in the > bash_history file without being > known? And also in wtmp? > How is it possible? > Thanks > - -- > Fajar http://linux.arinet.org > Linux mdk91.sistek.kom 2.4.21-0.13mdk GNU/Linux > 14:18:02 up 6:31, 11 users, load average: 0.25, > 0.26, 0.26 > Quote of the day: > Win98 errors 019-999: Reserved for future use; > presently used only to occupy > 49.3 MB diskspace. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQE/l4FGMai9kCFqACoRAtmcAKDBZnEMuQd/36RkKGg0PBxltr0L3QCggDwk > okgmd8EBZjDDM6rKDzRRXyY= > =OFbp > -----END PGP SIGNATURE----- > > > > Want to buy your Pack or Services from MandrakeSoft? > > Go to http://www.mandrakestore.com > __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
