On Tuesday 01 February 2005 11:20, Ow Mun Heng wrote: > On Fri, 2005-01-28 at 08:04, Peter Karlsson wrote:
> > However, taking it > > off-line and doing some basic forensic research revealed nothing. This > > doesn't mean that the computer isn't compromised of course. This happened > > right after I upgraded/emerged some packages, namely: > > I don't think it's possible for it to happen. One must _actaully_ want > to remove the .bash_history file because doing rm .bash_history just > doesn't work. What do you mean ? It works perfectly, provided you make sure you prevent the shell writing its history upon your subsequent exit (ie. don't exit cleanly): morpheus:~ # rm -f .bash_history morpheus:~ # ps PID TTY TIME CMD 18076 pts/1 00:00:00 su 18077 pts/1 00:00:00 bash 18095 pts/1 00:00:00 ps morpheus:~ # kill -9 18077 [EMAIL PROTECTED]:~> I can guarantee you there is no more /root/.bash_history now. Maarten -- bash-2.05b$ emerge ncy -- [email protected] mailing list
