--On December 7, 2012 10:23:56 AM +0100 Fleuriot Damien <[email protected]> wrote:
On Dec 6, 2012, at 9:20 PM, Paul Schmehl <[email protected]> wrote:
--On December 6, 2012 1:19:00 PM -0600 Tim Daneliuk
<[email protected]> wrote:
I understand this. Even the organization in question understands
this. They are not trying to *prevent* any kind of access. All
they're trying to do *log* it. Why? To meet some obscure
compliance requirement they have to adhere to in order to
remain in business.
<rant>
I know all of this is silly but that's our future when you
let Our Fine Government regulate pretty much anything.
</rant>
I sent this last night, but for some reason it never showed up.
/usr/ports/security/sudoscript
I believe this will meet your requirements.
I'm sorry to say it won't.
Nothing will prevent a user from removing sudoscript's FIFO once he gets
root privileges.
Well, sure, but, if someone logs in and sudos to root, that will be logged
by sudoscript. If the logging then ceases, that would be cause for
disciplinary action up to and including dismissal.
Not all problems can be solved with technology.
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson
"There are some ideas so wrong that only a very
intelligent person could believe in them." George Orwell
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"
