cybergod wrote:
> You can implement a simple system by using /usr/bin/script utility and
> pipe it a fifo on a NFS share for example. You need to establish a
> policy of course because there's an easy way to go around it. For more
> info and example read "man script".
>
> Hope this helps,
>
> Konstantin Ivanov
Yes I know this one. The problems with all of these little hacks is that
they are easily circumventable.
GrSecurity's Exec logging is something I'm investigating right now...
I've used it's chdir logging on a chrooted server of mine and it's quite
thorough.
> You can implement a simple system by using /usr/bin/script utility and
> pipe it a fifo on a NFS share for example. You need to establish a
> policy of course because there's an easy way to go around it. For more
> info and example read "man script".
>
> Hope this helps,
>
> Konstantin Ivanov
Yes I know this one. The problems with all of these little hacks is that
they are easily circumventable.
GrSecurity's Exec logging is something I'm investigating right now...
I've used it's chdir logging on a chrooted server of mine and it's quite
thorough.
-h
--
Hari Sekhon
[ reply ]