Potential Patch

[Darren Tucker]

Phil Dibowitz wrote:
> On Sat, Jul 24, 2004 at 05:56:25PM +0200, Sergio Gelato wrote:
>>Do you also log all input to the command? If not, what does this extra logging
>>buy you over ordinary process accounting?
> 
> Yes. That's all in the 'cmd' variable which is logged.

And if someone does, eg,
echo "(cd /tmp; ls)" | ssh yourserver /bin/sh

?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.