Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Jul 2010 15:04:43 -0300
From:      Fernan Aguero <fernan.aguero@gmail.com>
To:        freebsd-security@freebsd.org
Subject:   disable (new)syslog rotation and raise securelevel ... possible?
Message-ID:  <AANLkTim1YqSOu5i_5TPZ57OvNBLBYu8wc7adJBX1urTF@mail.gmail.com>

next in thread | raw e-mail | index | archive | help

Hi,

I'd like to harden my FreeBSD installation, and thus would like to, e.g.

i) chflags sappnd /var/log/*
ii) raise the securelevel of the system

Is this possible? I've read elsewhere that newsyslog would not work in
such a system ... what are the possible workarounds?

I wouldn't bother taking the system down once a week or every other
week, and manually lowering the securelevel, running newsyslog, etc.
Is there a guide somewhere on how to go about this?

Thanks!

-- 
fernan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTim1YqSOu5i_5TPZ57OvNBLBYu8wc7adJBX1urTF>