On Fri, 28 Jan 2005 17:08:07 -0800 (PST), Neil Schneider
<[EMAIL PROTECTED]> wrote:
> 
> Todd Walton said:
> > What security could regularly erasing the .bash_history offer?
> 
> Log in as root, and do "history | less". How much of that information
> would you like to have known by the next person logging in as root?

In my case, I would be the next person logging in as root.  And in any
case, if a person has root access, don't they implicitly have
permission to know about anything "root" should know about?

> In the case of a hacked box, if .bash_history exists there can be a lot
> of information that makes it easier to further compromise the system.

Shut the barn door!  The horses are out!

Or something...

-todd
-- 

KPLUG-List mailing list
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to