From owner-freebsd-questions Sun Jul 21 11:52:45 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9CBE737B400 for ; Sun, 21 Jul 2002 11:52:41 -0700 (PDT) Received: from ei.bzerk.org (ei.xs4all.nl [213.84.67.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id DB61743E58 for ; Sun, 21 Jul 2002 11:52:39 -0700 (PDT) (envelope-from fbsd-q@bzerk.org) Received: from ei.bzerk.org (BOFH@localhost [127.0.0.1]) by ei.bzerk.org (8.12.5/8.12.5) with ESMTP id g6LIrLA8001888; Sun, 21 Jul 2002 20:53:22 +0200 (CEST) (envelope-from stable@ei.bzerk.org) Received: (from stable@localhost) by ei.bzerk.org (8.12.5/8.12.5/Submit) id g6LIrLou001887; Sun, 21 Jul 2002 20:53:21 +0200 (CEST) Date: Sun, 21 Jul 2002 20:53:21 +0200 From: Ruben de Groot To: Dru Cc: freebsd-questions@freebsd.org Subject: Re: chflags and sappnd Message-ID: <20020721205321.A1713@ei.bzerk.org> References: <20020721114508.X14061-100000@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <20020721114508.X14061-100000@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca>; from dlavigne6@cogeco.ca on Sun, Jul 21, 2002 at 11:48:11AM -0400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Jul 21, 2002 at 11:48:11AM -0400, Dru typed: > > If I'm understanding the manpage correctly, > > chflags sappnd /var/log/* > > sounds like a good thing to do. > > Any comments or caveats on this? In some situations yes, but not in general: - newsyslog or other logrotating (and gzipping) utilities will no longer work. - anyone who can mess with the logfiles must allready be root, so unless your securelevel >0 they can just remove the flag, change the logs and put the flag back up. > > Dru > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message