Date: Tue, 16 Sep 2003 11:02:05 +0100 From: "Nikolay Kanchev" <niki@amk-drives.bg> To: <freebsd-security@freebsd.org> Subject: boot -s - can i detect intruder Message-ID: <014001c37c39$956ec2f0$0d00a8c0@amkdrives.bg>
next in thread | raw e-mail | index | archive | help
Hi list Several people have physical access to my FreeBSD box and I have the feeling that somebody try to get access with boot -s options . Can I log activity after boot -s option (change user password, install software and etc.). I use boot -s and change user password, but after reboot i can't find this atcivity in log files. The BSD box is shutdown and run again many time at day. Best regards, Nikolay Kanchev E-mail: niki@amk-drives.bg
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?014001c37c39$956ec2f0$0d00a8c0>