On Fri, Apr 06, 2001 at 07:43:29AM -0700, Mr. James W. Laferriere wrote:
>
> Hello Wichert ,
>
> On 6 Apr 2001, Wichert Akkerman wrote:
> > In article <[EMAIL PROTECTED]>,
> > Mr. James W. Laferriere <[EMAIL PROTECTED]> wrote:
> > > Not the problem being discussed , This is a user now root &
> > > having gained root is now attempting to from the command line
> > > to load a module . How do we get this event recorded ?
> > Recent versions of modutils (2.4.3 and later iirc) log that info
> > in /var/log/ksymoops
But r00tkit may have own version of insmod.
Regards
--
Artur Frysiak
Click and Buy Sp. z o.o.
tel. (071) 327-95-00 wew. 67
tel. GSM (0606) 506-414
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
