[no subject]

Yeah...that's my rule currently, but getting a lot of complaints from
admins complaining that "it's too hard/cumbersome" to do.  Doesn't carry a
lot of weight here, but if there's a more implicit solution out there I'm
open to options.

Because of the power of root to remove said logs, it'd be even nicer to
have logging go across the wire to secure, centralized box...

Thanks,
John



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00415" href="msg00415.html">[ale] Auditing root shells</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00407" href="msg00407.html">[ale] Auditing root shells</a></strong>
<ul><li><em>From:</em> jb at sourceillustrated.com (John Wells)</li></ul></li>
<li><strong><a name="00411" href="msg00411.html">[ale] Auditing root shells</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00415.html">[ale] Auditing root shells</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00416.html">[ale] Auditing root shells</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00416.html">[ale] Auditing root shells</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00415.html">[ale] Auditing root shells</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00413"><strong>Date</strong></a></li>
<li><a href="threads.html#00413"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>