Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752110AbWAEL77 (ORCPT ); Thu, 5 Jan 2006 06:59:59 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752168AbWAEL76 (ORCPT ); Thu, 5 Jan 2006 06:59:58 -0500 Received: from post.pl ([212.85.96.51]:5876 "HELO v00051.home.net.pl") by vger.kernel.org with SMTP id S1752110AbWAEL76 (ORCPT ); Thu, 5 Jan 2006 06:59:58 -0500 Message-ID: <43BD09F4.2090603@post.pl> Date: Thu, 05 Jan 2006 12:58:44 +0100 From: "Leonard Milcin Jr." User-Agent: Thunderbird 1.5 (X11/20051201) MIME-Version: 1.0 To: Roberto Nibali CC: Jan Engelhardt , linux-kernel@vger.kernel.org Subject: Re: [OT] Re: keyboard driver of 2.6 kernel References: <1136363622.2839.6.camel@laptopd505.fenrus.org> <43BB906F.3010900@post.pl> <43BCF005.1050501@drugphish.ch> In-Reply-To: <43BCF005.1050501@drugphish.ch> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1078 Lines: 28 Roberto Nibali wrote: >>> Let's pretend it's some sort of auditing ;-) >> >> Actually, I use my keylogger (advertised above) more for "situation >> reconstruction" rather than spying. When you happen to have a multi-root >> environment and people "forget what they did", stuff like ttyrpld can >> really be a gift compared to .bash_history (if it exists, after all). > > If one needs it a bit less intrusive, she can also patch bash. A > possible solution can be found here: > > http://www.drugphish.ch/patches/ratz/bash/bash-3.0-fix_1439-3.diff > > But http://ttyrpld.sourceforge.net/ looks indeed interesting, however no > 2.4.x support from what I can see. > > Regards, > Roberto Nibali, ratz This can be very easily circumvented if you can execute another shell (for example your own version of bash without patch). L. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/