On Friday 25 March 2005 08:50, Chris Stankaitis wrote: > Esentially as I mentioned what we need to create is a centralized > logging server where all our boxes will log to, which in itself is setup > in a way so that even root can not modify the logs without it being > painfully obvious that the server had been compromised. We would be > turning off logrotate, the box would be a minimal install, with it's > only function to run a logger which would write local messages, as well > as take in the logs from all other servers. So why not just prevent any logins on this box? No users, no root login allowed. Admin would have to be done using a rescue CD or something similar. -- Remco Treffkorn (RT445) HAM DC2XT remco@xxxxxxx (831) 685-1201
