Tim Clewlow schrieb:
One solution would be to have /var/log/auth.log being tailed out via a serial port to another computer that is not accessable via a network - or have it sent to a printer for a permanent hard-copy. It all depends on how much you really want to do in regard to security.
A good practice is running a log host which has a cable that has only RX wires connected.
Cheers, Jan -- Jan Muenther, CTO Security, n.runs AG _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[EMAIL PROTECTED]"