Re: Command history log for audit trail

2006-06-15 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 you can run snoopy which will log all commands issued into auth.log - - Ceers, Peter On 15.06.2006, at 22:08, [EMAIL PROTECTED] wrote: I need to set up an audit trail for all commands run on machines. I know that the auth.log records who logs

Conclusion: Compromised system - still ok?

2005-02-07 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wow you guys, thank you very much for all your input. I'll sit down with the manager and we'll discuss which route to take. My first instinct was to warm up those drives and get the tapes .. but I may want to find out more as you guys have suggested!

Re: Dsniff/mailsnarf

2004-02-25 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 For all of us non native speakers of english and living outside the USA, here's some info on the acronyms to follow the thread: http://www.safetyfile.com/page/S/CTGY/HIPPA http://www.gaarde.org/acronyms/?lookup=cya Thanks Jose for that .. :) And

Re: Dsniff/mailsnarf

2004-02-25 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 For all of us non native speakers of english and living outside the USA, here's some info on the acronyms to follow the thread: http://www.safetyfile.com/page/S/CTGY/HIPPA http://www.gaarde.org/acronyms/?lookup=cya Thanks Jose for that .. :)

Re: aide, apt-get and remote management...

2003-12-14 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I would like to thank everybody for their great input. It was very useful to see your responses. I guess the recent rootings have made us all a little more careful. Take care, Peter - -- Dipl.-Ing. Peter Burgstaller Technical Director @ all

Re: aide, apt-get and remote management...

2003-12-11 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable

Re: aide, apt-get and remote management...

2003-12-11 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable

Re: kernel-source 2.4.20 + grsecurity + freeswan

2003-06-06 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I have debian (stable) with a stock kernel from kernel.org (2.4.20) with FreeSwan 1.99 and grsecurity 1.99h. Worked without a problem so far. The order of pachtes was first FreeSwan, then grsec, if that makes any difference... Good luck,

Re: kernel-source 2.4.20 + grsecurity + freeswan

2003-06-06 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I have debian (stable) with a stock kernel from kernel.org (2.4.20) with FreeSwan 1.99 and grsecurity 1.99h. Worked without a problem so far. The order of pachtes was first FreeSwan, then grsec, if that makes any difference... Good