Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Apr 2004 00:35:29 +0900
From:      Rob <nospam@users.sourceforge.net>
To:        freebsd-questions@freebsd.org
Subject:   securelevel=3 and append-only: can I use this for files in /var/log/ ?
Message-ID:  <4083F1C1.90809@users.sourceforge.net>

next in thread | raw e-mail | index | archive | help

Hi,

To prevent a possible intruder to modify the syslog files
(unless rebooting the system), would following cause havoc
on my FreeBSD-stable PC, or would it add the expected security:


as root:
   # chflags sappnd /var/log/*

rc.conf:
   kern_securelevel_enable="YES"
   kern_securelevel="3"

And reboot the system.

Rob.







Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4083F1C1.90809>