Fake CDroms and monitoring programs

**BDV** · 03-14-2002, 09:18 PM

First I want to create a partition that looks like a cd rom drive to programs. Second I am looking for a program that will monitor another program.

The monitoring program I want it to tell me if the program I am watching makes any changes to files, runs other programs, or sends any info out over the net. Is there anything out that does that?

Brett

**pbharris** · 03-14-2002, 09:25 PM

hello,
i am not sure about the monitering program, for the CDrom just do a mount -o loop -t iso9660 /locaiton/of/cd.iso /mount/point/

of course the the directory /mount/point needs to exist.

**BDV** · 03-14-2002, 11:12 PM

You don't even need a seperate partition all u need is a iso image?

hello,
i am not sure about the monitering program, *for the CDrom just do a mount -o loop -t iso9660 /locaiton/of/cd.iso /mount/point/

of course the the directory /mount/point needs to exist.

**Ashcrow** · 03-14-2002, 11:19 PM

You don't even need a seperate partition all u need is a iso image?

Thats correct.

**gorn** · 03-15-2002, 12:58 AM

for seeing if it sends anything over the net you can run a packet sniffer, for file changes.....
okay got it, make a new user, with write access to only ~, then just keep checking whats created/changed.

**BDV** · 03-15-2002, 01:30 AM

I don't get it. a new user with write access only. So I run the program with the user with write access only?

make a new user, with write access to only ~, then just keep checking whats created/changed.

**civ1492** · 03-15-2002, 01:53 PM

hmm never used such a thing but you could try some intrusion detection systems to monitor a program

http://freshmeat.net/search/?q=intru...ction=projects

**gorn** · 03-19-2002, 11:27 PM

I don't get it. a new user with write access only. So I run the program with the user with write access only?

err the user can only write to ~ (~ mean their homedirectory) so anything that the program changes has to be in their homedirectory (make sure you ls -a or ls -A)