Don't know if it's possible to do that... well. ok... it's got to be
possible... but.. what you CAN do that seems to work pretty well for me is run
a script from cron to copy your secuity logs to alternate locations.
In my case, the script diffs the log against a copy that was made the previous
minute, puts the output of the diff into another file, copies the "real" log
over the copy. Then, once every 24 hours, the diff output file is moved to
ANOTHER location on another system. make sense? That way, even if someone
alters my log files, I still have info on how they were altered and still have
records of the access and the alteration.
On Fri, 10 Mar 2000, from your lips spewed forth:
> Having read various security sites, I've read that it is possible to have
> all log files written to another server besides the server that is doing
> the actual logging. What I would like to know is if it is possible to
> have the log files written to both the Linux /var/log directory *and*
> another server somewhere else at the same time?
>
> And if this is possible, how can it be done? What commands? The security
> pages weren't that good in the sense that they didn't explicitly define
> the process.
>
> Thanks.
>
> james
--
---------------------------------
"Love is like a snowmobile speeding across the frozen tundra. Suddenly, it
flips, pinning you to the ground. At night the ice weasels come."-Matt Groening
Magnus The Evil Troll
e-mail: [EMAIL PROTECTED]
phone : 1-800-POD-BABY
Web: http://www.geocities.com/SouthBeach/Marina/3780
