LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-28-2010, 03:19 AM   #1
maestromani
LQ Newbie
 
Registered: Sep 2010
Posts: 11

Rep: Reputation: 0
Question.


Hi There,

I have following question in Linux.

1. How Can we all login logs and the command executed for six month.
2. Can we have two levels of password so that if one is compromised, the 2nd one can block access?

All this i need for CENTOS.

BRs
 
Old 10-28-2010, 03:49 AM   #2
evo2
LQ Guru
 
Registered: Jan 2009
Location: Japan
Distribution: Mostly Debian and Scientific Linux
Posts: 5,753

Rep: Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288
I strongly recommend you make the title of your post summarize the text in the body, otherwise most people will ignore it.

Quote:
Originally Posted by maestromani View Post
1. How Can we all login logs and the command executed for six month.
Have a look at the files in /var/log/
Quote:
2. Can we have two levels of password so that if one is compromised, the 2nd one can block access?
Yes. If a users account is comprised the root user can still block access to that account.

Evo2.
 
Old 10-28-2010, 05:14 AM   #3
maestromani
LQ Newbie
 
Registered: Sep 2010
Posts: 11

Original Poster
Rep: Reputation: 0
How to Secure Linux server.

Thanks a lot for your response. Didn't read my typing before posting, My mistake. I'm redefining what i need. I'm in the process of creating secured environment. I need solution for following question.

1. Since this is going to be secured environment i want to know whether i can store all the commands executed by user can be captured, so any later investigation can be made on that.

But good (or evil) crackers know /var/log/message, of course, and will manipulate that once they have access.

2. My intention is instead of one password, i want user to enter two thing before getting into that machine. For example password and passphare. Two level of authentication.
 
Old 10-28-2010, 12:45 PM   #4
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 16,817

Rep: Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408Reputation: 2408
passwords are not a good way of securing a system , and never has been , they are to easy to get around

CentOS 5.5 already has SELinux built in -- use it

there is a setting above "enforcing" - not set by default
the "paranoid / "tin foil hat" " setting that the NSA uses

lock the system down .

Last edited by John VV; 10-28-2010 at 12:47 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
basic html question - download link to files on my webpage question Davno Linux - Server 5 12-25-2009 08:24 AM
linux distro question & mysql install question natalie.aloi Linux - Newbie 5 07-19-2009 09:28 PM
Question, Apples Contribution to Open Source + MacOs file structure question Higgy3k Other *NIX 5 07-25-2005 05:23 AM
Not your regular GRUB question - just a short question for a fried MBR!! ziphem Linux - General 3 01-31-2005 02:51 PM
login prompt question & kde scheme question JustinCoyan Slackware 2 06-09-2004 03:02 PM


All times are GMT -5. The time now is 06:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration