From owner-freebsd-security Wed Dec 9 17:13:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA26868 for freebsd-security-outgoing; Wed, 9 Dec 1998 17:13:21 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from cc00ms.unity.ncsu.edu (cc00ms.unity.ncsu.edu [152.1.1.35]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA26860 for ; Wed, 9 Dec 1998 17:13:19 -0800 (PST) (envelope-from jjyuill@eos.ncsu.edu) Received: from wind (wind.csc.ncsu.edu [152.1.75.167]) by cc00ms.unity.ncsu.edu (8.8.4/US19Dec96) with SMTP id TAA22843 for ; Wed, 9 Dec 1998 19:46:05 -0500 (EST) Message-Id: <3.0.5.32.19981209194955.009414b0@pop-in.ncsu.edu> X-Sender: jjyuill@pop-in.ncsu.edu X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Wed, 09 Dec 1998 19:49:55 -0500 To: FREEBSD-SECURITY@FreeBSD.ORG From: Jim Yuill Subject: Re: append-only devices for logging Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Subject: Re: append-only devices for logging > >At 06:53 PM 12/9/98 -0500, you wrote: >>I've been looking for an append-only device for logging, which a remote >>hacker (with root access) can not erase or alter. Other than a >>line-printer, are there any such devices that actually work with Unix? > >How about a serial line to a non-networked PC which just logs to a local >disk? We're going to be setting up something like this with a multiport >card to monitor a bunch of servers. > > Will you use uucp to handle the serial comm? Thanks for the reply, Jim ############################################################# Jim Yuill, graduate student Computer Science Department, North Carolina State University 919-513-1894 (w), 919-546-0537 (h) home page: http://www.pobox.com/~jimyuill To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message