LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-23-2004, 08:02 AM   #1
tbeaton
LQ Newbie
 
Registered: Jun 2004
Posts: 3

Rep: Reputation: 0
logging failed access to security objects


I am trying to log all failed access to security objects. I currently have process accounting turned on so I see all commands run but that doesn't tell me success or failure of the command. I currently log all logins (successful and unsuccessful) but I can't find anywhere that the system logs failed access to security objects. For example if someone who isn't authorized tries to read or copy my /etc/shadow file or my log files. I have it set up so my system denies them access but I can't figure out how to make it log that someone tried to access them and was denied. I googled for various forms of this but haven't found anything yet. Anyone know??
 
Old 06-24-2004, 05:05 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594
I can't find anywhere that the system logs failed access to security objects. For example if someone who isn't authorized tries to read or copy my /etc/shadow file or my log files. I have it set up so my system denies them access but I can't figure out how to make it log that someone tried to access them and was denied.
Have a look at GRSecurity, it's ACL and audit functionality.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Logging Thoughts Matir Linux - Security 12 09-18-2005 08:47 AM
Logging failed CDE login ]un]ie Solaris / OpenSolaris 5 12-19-2004 07:18 AM
Security Logging mibsun Linux - Security 2 07-22-2003 04:35 PM
logging system failed pangfai Linux - Security 1 05-29-2003 04:54 AM
Samba logging & security aimstr8 Linux - General 0 05-30-2001 02:45 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration