Date: Mon, 30 Jul 2007 13:34:10 +0100 From: Adam J Richardson <fatman.uk@gmail.com> To: Tom Evans <tevans.uk@googlemail.com> Cc: freebsd-questions@freebsd.org, Ian Lord <mailing-lists@msdi.ca> Subject: Re: Root access loggin Message-ID: <46ADDAC2.3010404@crackmonkey.us> In-Reply-To: <1185794014.1444.7.camel@localhost> References: <050b01c7ce16$960a0570$6400a8c0@msdi.local> <1185794014.1444.7.camel@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
Tom Evans wrote: > This seems great in principle, but of course, you just gave them a root > shell, and so they can delete their log file easily enough... You could have cron email it to you every 5 minutes. Unlikely he'd check the crontab immediately, unless he was really bent on the system's destruction. Likely you'd have at least some evidence of his behaviour. Of course your email box would fill up quickly. Adam J Richardson
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46ADDAC2.3010404>