Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 21 Jul 2002 20:53:21 +0200
From:      Ruben de Groot <fbsd-q@bzerk.org>
To:        Dru <dlavigne6@cogeco.ca>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: chflags and sappnd
Message-ID:  <20020721205321.A1713@ei.bzerk.org>
In-Reply-To: <20020721114508.X14061-100000@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca>; from dlavigne6@cogeco.ca on Sun, Jul 21, 2002 at 11:48:11AM -0400
References:  <20020721114508.X14061-100000@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jul 21, 2002 at 11:48:11AM -0400, Dru typed:
> 
> If I'm understanding the manpage correctly,
> 
> chflags sappnd /var/log/*
> 
> sounds like a good thing to do.
> 
> Any comments or caveats on this?

In some situations yes, but not in general:

- newsyslog or other logrotating (and gzipping) utilities will no 
  longer work.
- anyone who can mess with the logfiles must allready be root, so 
  unless your securelevel >0 they can just remove the flag, change 
  the logs and put the flag back up. 

> 
> Dru
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020721205321.A1713>