--- Jan Engelhardt <[EMAIL PROTECTED]> wrote:
> Someone please enlighten me why a regular keylogger² that captures > both input and output could not do the same. (Auditing what one has done.) 1. shell aliases # innocuous -p 0 2. shell variables # $INNOCUOUS -p 0 3. symlinks # ./innocuous -p 0 Yes, I know there are ways to prevent each of these "attacks", but it's surprising how often simple textual changes are effective in hiding behavior. Casey Schaufler [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
