set savehist = (1000 merge) is broken from 6.21.00 or another before.
You must run history -M before exiting tcsh.
___
freebsd-security@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
Seems a little extreme, you could check other users .cshrc .tcshrc flies and
see if there is a builtin mech for (history -c) in a trap or otherwise that
might explain it.
If root history is a concern, audit should probably setup on that system if it
runs that deep in the infrastructure before e
You could set a higher securelevel and use system flags like:
chflags sappnd .history
Which will prevent it from being erased and only allow appending.
On Tue, 31 Mar 2020 at 10:59, el kalin wrote:
> hi all...
>
> noticed that over night the shell .history file for root was emptied. the
> file i
hi all...
noticed that over night the shell .history file for root was emptied. the
file is there but there is no history in it. this is unusual and it's the
second time it happens in 2 months. it's particularly peculiar since nobody
else has the root password for this machine. i can't see any ssh
