[Plug-security] forensic analysis

Jason jkenner@mindspring.com
Thu, 28 Sep 2000 12:54:05 -0700


Wes Bateman wrote:
> 
> > Since scripts run at a system halt, obviously doing this opens an
> > oppurtunity for something to happen. Since you dont really care so
> > much about halting the system properly as preserving data, one
> > possibility is simply to kill -9 all current processes (except your
> > shell) from a console login, all at once, sync the drives, then umount
> > them all (you need to kill processes to be able to umount them), THEN
> > do a hard powerdown...
> To execute this, any easy way to simultaneously kill -9 all process except
> your shell?

Well, you could make a command out of grep, ps, and cut, but then you
have to wonder if grep and cut are safe.

kill -9 `ps a|cut -c 1-5|grep -v $$`

-- 
jkenner @ mindspring . com__
I Support Linux:           _> _  _ |_  _  _     _|
Working Together To       <__(_||_)| )| `(_|(_)(_|
To Build A Better Future.       |                   <s>