Tim Clewlow schrieb:
>
> One solution would be to have /var/log/auth.log being tailed out via a serial
> port to another computer that is not accessable via a network - or have it sent
> to a printer for a permanent hard-copy. It all depends on how much you really
> want to do in regard to security.
>
A good practice is running a log host which has a cable that has only RX
wires connected.
Cheers,
Jan
--
Jan Muenther, CTO Security, n.runs AG
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"