----- Original Message -----
From: gilbert raja <raja_gilbert@xxxxxxxxxxx>
Sure. But it must be a invisible service. nobody should start or stop
that service.Without their permission it should log all the keyboard
entries.
--------------------------------
Aah. Actually I don't know if you can have invisible services in
Linux. If you use a deceptive command name for your keylogger - a
normal user who has no reason to suspect anything wouldn't give a
second thought even if he saw the command in a 'ps' listing. And a
normal user wouldn't be able to kill it even if he suspects it.
My box once got hacked into. I didn't realize it till I noticed an
unexplained increased in hard-disk activity. Did a ps and when through
the running programs with a fine comb to find the suspect program.
Since then, I've made an effort to learn IP tables :">