From owner-FreeBSD-users-jp@jp.freebsd.org  Thu Apr 15 23:33:25 1999
Received: by jaz.jp.freebsd.org (8.9.2+3.1W/8.7.3) id XAA11848;
	Thu, 15 Apr 1999 23:33:25 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from trueno.baku.or.jp (trueno.baku.or.jp [210.161.77.252])
	by jaz.jp.freebsd.org (8.9.2+3.1W/8.7.3) with ESMTP id XAA11842
	for <FreeBSD-users-jp@jp.freebsd.org>; Thu, 15 Apr 1999 23:33:21 +0900 (JST)
	(envelope-from masakazu@yamada.gr.jp)
Received: (from masakazu@localhost)
	by trueno.baku.or.jp (8.8.8/3.7W) id XAA05096;
	Thu, 15 Apr 1999 23:33:16 +0900 (JST)
To: FreeBSD-users-jp@jp.freebsd.org
References: <37144E2D.708CCE02@jaif.or.jp>
 <19990414173239Y.hirano@t.kanazawa-u.ac.jp> <37145F6E.F12B08AF@jaif.or.jp>
 <m2u2uj1pic.fsf@star.aquilax.co.jp> <3715DE13.8CBD62E7@jaif.or.jp>
MIME-Version: 1.0 (generated by SEMI 1.13.2 - "Mikawa")
Content-Type: text/plain; charset=ISO-2022-JP
From: masakazu@yamada.gr.jp (Masakazu Yamada)
Date: 15 Apr 1999 23:33:15 +0900
In-Reply-To: <3715DE13.8CBD62E7@jaif.or.jp> (Kentaro Hatori's message of "Thu, 15 Apr 1999 21:39:47 +0900")
Message-ID: <87btgqlzro.fsf@trueno.baku.or.jp>
Lines: 27
User-Agent: Semi-gnus/6.10.3 SEMI/1.13.2 (Mikawa) FLIM/1.12.5 (Hirahata) Emacs/20.3 (i386-next-nextstep3) MULE/4.0 (HANANOEN)
X-Face:  "eh;q+(S.*/UH%*zN1_HQR>pU[S[3oX%^=yA5eS+aeCsbYkAu5sh|99qI3n|Nbg9,k}9`&M
 ~\9`;lIq=dGJ\?VvgH01WG+.PI'>'n7q7rz%+*/=N+^7QTn~1M%0LYU/9XF\5eEdNgL`Ma:U/X.W7j
 68{"n/pT-oI#/_N>3zrCyywBQ$u5fK}(d:6I#vt;.4gjE);@q4vs|Lk>?dL#kZh=`V9A]7+
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990405
X-Sequence: FreeBSD-users-jp 41305
Subject: [FreeBSD-users-jp 41305] Re: How do you do about illeagal access on  your host?
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: masakazu@trueno.baku.or.jp


>>>>> In <3715DE13.8CBD62E7@jaif.or.jp> 
>>>>>	Kentaro Hatori <hatori@jaif.or.jp> wrote:

> $B$3$s$J%D!<%k$,$"$C$F$$$$$b$N$J$N$+!"6/$$%7%g%C%/$r<u$1$^$7$?!#(B
> $B$3$l$C$F0lHL%f!<%6$N%"%+%&%s%H$5$(;}$C$F$$$l$P!"(BTrojan$BE*$J(B
> $B%W%m%0%i%`$r;E3]$1$k$3$H$,$G$-$k$H$$$&$3$H$G$9$h$M(B...

fbsdrootkit$B$K$O$=$N$h$&$J$b$N$O4^$^$l$F$$$J$$$_$?$$$G$9!#$I$&$d$C$F0l(B
$BHL%f!<%6$,(Broot$B8"8B$rF@$k$+$H$$$&$N$O!"!V(Bexploit root$B!W$J$I$N%-!<%o!<%I(B
$B$G8!:w$9$k$HBt;38+$D$+$k$H;W$$$^$9!#0lHLE*$K$O!"(Bsetuid root$B$5$l$?%W%m(B
$B%0%i%`$N%P%C%U%!%*!<%P!<%U%m!<$N%P%0$rMxMQ$7$F(Broot$B8"8B$N(Bshell$B$rIT@5$K(B
$B<B9T$9$k$H$$$&<j8}$G$9!#(B

$B$"$H$OB>$N%^%7%s$K;E3]$1$i$l$?(Bsniffer$B$K$h$C$F!":G=i$+$i(Broot$B$N%Q%9%o!<(B
$B%I$,CN$l$F$$$k$H$$$&2DG=@-$b$"$j$^$9!#(Bsniffer$B$N(Blog$B$rC5$7$F$_$^$7$g$&!#(B
$B%G%U%)%k%H$O(Bsniffit.log$B$H$$$&L>A0$K$J$C$F$$$k$=$&$G$9!#0lHLE*$K$O!"(B
'. ' '.. ' $B$J$I$H$$$&8+$($J$$%G%#%l%/%H%j$KCV$+$l$^$9!#(B

> $B%7%g%C%/$r<u$1$F$P$+$j$bF~$i$l$J$$$N$G!"%j%b!<%H$J4D6-$G$N(BOS$B$N:F(B
> $B%$%s%9%H!<%k$b$^$^$J$i$J$$8=>u$G$O!"$H$j$"$($:<!$N$h$&$JBP=hNEK!$r(B
> $B$7$^$7$?!#(B

$B0-$$$3$H8@$o$J$$$+$i!"%M%C%H%o!<%/$+$i@Z$jN%$7$F:F%$%s%9%H!<%k$9$k$3$H(B
$B$r4+$a$^$9!#$=$l$+$i!"A4%f!<%6$N%Q%9%o!<%I$rJQ99$9$kI,MW$,$"$k$G$7$g$&!#(B

-- 
masakazu@yamada.gr.jp (Masakazu Yamada) $B;3ED(B $B2m0l(B
