Re: port 6051: hacked?

2002-09-08 Thread Jean-Francois Dive
anyway, the best place is not /tmp but /var/log/whatever_far_away_in_the_hierarchy , change too much with log to keep tripwire to check, mounted as standard partition on most of the systems ... On Sun, Sep 08, 2002 at 02:15:25AM +0200, martin f krafft wrote: > also sprach Phillip Hofmeister <[

Re: port 6051: hacked?

2002-09-08 Thread martin f krafft
also sprach Giacomo Mulas <[EMAIL PROTECTED]> [2002.09.08.0746 +0200]: > try putting any binary, as a test, in /tmp, e.g. copy /bin/ls to > /tmp/testexe. Then issue the command > > /lib/ld-linux.so.2 /tmp/testexe > > to see how (little) useful the noexe option is... i feel dizzy. thanks for lett

Re: port 6051: hacked?

2002-09-08 Thread Giacomo Mulas
On Sun, 8 Sep 2002, martin f krafft wrote: > which is why /tmp is mounted with noexec, just like /home try putting any binary, as a test, in /tmp, e.g. copy /bin/ls to /tmp/testexe. Then issue the command /lib/ld-linux.so.2 /tmp/testexe to see how (little) useful the noexe option is... Bye Gia