Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 4 Feb 2002 17:39:09 +0100
From:      =?iso-8859-1?Q?Geir_R=E5ness?= <geir@dropzone.as>
To:        <petko@freebsd-bg.org>
Cc:        <freebsd-security@freebsd.org>
Subject:   Re: Reliable shell logs
Message-ID:  <001401c1ad9a$7be6d9e0$0100a8c0@elixor>
References:  <20020204152325.GA64082@fbi.gov>

next in thread | previous in thread | raw e-mail | index | archive | help
You always could set your users to the shell bash, that is patched with the
"bofh" logging.
That's one way you could secure log your users, but it could be found.
It all depends on the intruder.

This you can do something about however,  you can have an locale log server,
that the "shell" server sends the log to,
with upload access only.
So the intruder cant delete the logs, you probaly shuld make this server an
local login only.

Geir Råness
PulZ @ efnet

----- Original Message -----
From: "Petko Popadiyski" <petko@freebsd-bg.org>
To: <freebsd-security@freebsd.org>
Sent: Monday, February 04, 2002 4:23 PM
Subject: Reliable shell logs





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001401c1ad9a$7be6d9e0$0100a8c0>