On Wed, Nov 27, 2002 at 07:02:59PM +1100, Emmanuel Galanos wrote: Hi, > Anyone have any ideas for a good syslog replacement for Owl? I suggest that you don't replace whatever we have currently unless you modify the replacement in a similar way (to run with reduced privileges). The plan is still to use Darren Reed's nsyslogd, but that needs more work. > I have done a brief search and: > > http://www.corest.com/products/corewisdom/CW01.php > > looks promising. Last time I checked, it didn't offer secure realtime remote logging. All it did was to sign locally stored log records such that if they're tampered with that would be noticed. But there was nothing to stop the intruder from wiping logs, so all you would notice is that there has been an intrusion and the logs have been wiped. -- /sd
This archive was generated by hypermail 2.1.3 : Sun Jan 15 2006 - 13:43:17 PST