[Cialug] bash_history zero

Kevin C. Smith kevin at linuxsmith.com
Sat Oct 1 13:00:36 CDT 2005


Everything is good there. HISTFILE, HISTFILESIZE all okay.


On Sat, 2005-10-01 at 11:18 -0500, Jerry Weida wrote:
> Check and make sure that the HISTFILE is not set to /dev/null or
> something in your .profile.  If it is not set at all in there, then
> bash should default to ~/.bash_hsitory.  Also, make sure that
> HISTFILESIZE and HISTSIZE are not set to 0.  HISTFILESIZE will limit
> how big that file can get, while HISTSIZE will limit the number of
> entries in the file.  If any of these have been set in your .profile,
> then that would be cause for concern as intruders will set these so
> that their commands are not logged. 
> 
> On 10/1/05, Kevin C. Smith <kevin at linuxsmith.com> wrote:
>         Anyone know why this would happen?
>         
>         chkrootkit report:
>         Warning: `//root/.bash_history' file size is zero
>         
>         The file time stamp is the same time I rebooted
>         the server. Can this happen on reboot? Seems odd. 
>         
>         I can't find any other evidence to compromise, so ..
>         
>         
>         --
>         Kevin C. Smith
>         
>         _______________________________________________
>         Cialug mailing list
>         Cialug at cialug.org
>         http://cialug.org/mailman/listinfo/cialug
> 
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
-- 
Kevin C. Smith



More information about the Cialug mailing list