On Saturday, November 24, 2018 10:37:41 AM EST Ranran wrote: > Is there a way to encrypt the auditd logs which are saved to disk? > The system need to save logs from local into disk (not a remote > connection), but it should be saved encryped. Is there a way to do it
Typically audit logs are protected by virtue of needing root to read anything. An untrusted root user is something Linux isn't designed for. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit