Re: syslog insmod please!

[Mr. James W. Laferriere]

	Hello Wichert ,
On Fri, 6 Apr 2001, Artur Frysiak wrote:
> On Fri, Apr 06, 2001 at 07:43:29AM -0700, Mr. James W. Laferriere wrote:
> > On 6 Apr 2001, Wichert Akkerman wrote:
> > > In article <[e-mail]>,
> > > Mr. James W. Laferriere <[e-mail]> wrote:
> > > >	Not the problem being discussed ,  This is a user now root &
> > > >	having gained root is now attempting to from the command line
> > > >	to load a module .  How do we get this event recorded ?
> > > Recent versions of modutils (2.4.3 and later iirc) log that info
> > > in /var/log/ksymoops

> But r00tkit may have own version of insmod.
	OK ,  There are no special features accorded to /var/log/ksymoops
	than to any other file .  Unless otherwise configured .
	Am I that mistaken ?  I hope not .  Tia ,  JimL

       +----------------------------------------------------------------+
       | James   W.   Laferriere | System  Techniques | Give me VMS     |
       | Network        Engineer | 25416      22nd So |  Give me Linux  |
       | [e-mail] | DesMoines WA 98198 |   only  on  AXP |
       +----------------------------------------------------------------+