[Re: [Re: [SunHELP] Locking down root]]

[Jonathan Fortin]

Heh you can log it to another syslog machine.


----- Original Message -----
From: "Kevin Stevens" <Kevin_Stevens at pursued-with.net>
To: <sunhelp at sunhelp.org>
Sent: Friday, August 10, 2001 8:19 PM
Subject: Re: [Re: [Re: [SunHELP] Locking down root]]


> What stops them from hacking the sulog once they're in?
>
> KeS
>
> On 10 Aug 2001, David McMullen wrote:
>
> > My boss wants everyone who needs root access to get it through su.  that
way I
> > can track the sulog.  That's what bosses are for!
> >
> > davidmac
> >
> > Phil Brutsche <phil at giedi.obix.com> wrote:
> > A long time ago, in a galaxy far, far way, someone said...
> >
> > > I have been asked to lock out console as well!
> >
> > And who asked for that foolishness?  Someone who doesn't have to
maintain
> > the computer?
> >
> > If someone can just walk up to the computer itself and log into the
> > console I think you've got bigger problems... like someone
> >
> > 1) walking away with the system (you didn't mention how big this
computer
> >    is)
> > 2) walking up, rebooting via the power cable and booting off CD to get
to
> >    the computer
> >
> > or any number of other things.
> >
> >
> > Phil
> >
> > _______________________________________________
> > SunHELP maillist  -  SunHELP at sunhelp.org
> > http://www.sunhelp.org/mailman/listinfo/sunhelp
> >
> > _______________________________________________
> > SunHELP maillist  -  SunHELP at sunhelp.org
> > http://www.sunhelp.org/mailman/listinfo/sunhelp
> >
>
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
>