LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Zero-length bash .history file! (http://www.linuxquestions.org/questions/linux-security-4/zero-length-bash-history-file-388642/)

revmyo 12-02-2005 11:57 AM

Zero-length bash .history file!
 
Routinely running chkrootkit yesterday, I noted a warning to the effect that root's bash .history file was found to be zero-length. Since I'm about as sure as I can be that I didn't do that myself, I'm wondering if this means that the system has been cracked. Are there other tests I can run to double-check, somehow? :eek:

Thanks in advance,
Denis

P.S. I didn't find other threads about this in LQ.

jailbait 12-03-2005 09:09 PM

"Are there other tests I can run to double-check, somehow?"

In SuSE the default history file size is 1000.
You can log in as root and use these commands to verify that bash's .history is in fact zero length:

echo $HISTFILESIZE
echo $HISTSIZE

----------------------
Steve Stites


All times are GMT -5. The time now is 11:31 AM.