On Fri, Jan 02, 2009 at 10:52:53PM +0100, S?bastien Fiol wrote: > > Good afternoon, > I need to ask you a question about the dm-crypt system. > > Someone tried to get into my personal computer but he failed thinks > to the passphrase of encrypted device. In fact when i came back to > my home, i saw that my computer has been swhitched on and it > displayed "passphrase failled" or something equal. Nowadays, i need > to find intrusion's traces . How can i make it? I didn't found any > log file about encrypted device's denied access. > > Can you help me? AFAIK dm-crypt does not log anything. This is teh right decision from a security point of view. However log-in failures (is somebody tried to guess your root password) are listed in teh system log. What is your set-up? Complete encrypted system, or just some partition encrypted? Also, keep in mind that if somebody boots your system from an external medium, e.g. a Knoppix CD or an USB stick, nothing will go into your on-disk log. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier --------------------------------------------------------------------- dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/ To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx For additional commands, e-mail: dm-crypt-help@xxxxxxxx
