search

unix-thrust / beurk

BEURK Experimental Unix RootKit
GNU General Public License v3.0
363 stars 94 forks source link

hooking on chdir(2) function #5

Open chqrly opened 9 years ago

chqrly commented 9 years ago

In addition to hiding directory, chdir(2) must not open them.

example :

attacker:

$ ls
__HIDDEN_FILE__toto

victim:

$ cd __HIDDEN_FILE__toto`
cd: no such file or directory: __HIDDEN_FILE__toto