From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Booth Subject: Log file security Date: Sun, 28 Jan 2007 22:06:06 +0000 Message-ID: <1170021966.3753.35.camel@localhost.localdomain> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1030233962==" Return-path: Received: from [192.168.250.101] (sebastian-int.corp.redhat.com [172.16.52.221]) by pobox.surrey.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id l0SM5xdL000580 for ; Sun, 28 Jan 2007 22:05:59 GMT List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com --===============1030233962== Content-Type: multipart/alternative; boundary="=-Ffocwyqu3zfjqWFn6X1k" --=-Ffocwyqu3zfjqWFn6X1k Content-Type: text/plain Content-Transfer-Encoding: 7bit I have what I suspect is a fairly common requirement for immediate log file security for auditing. At the same time, I have the same requirement for logging several arbitrary applications. After considering various options, I'm currently looking at writing logs to NetApp SnapLock: http://www.netapp.com/products/software/snaplock.html. Does anybody have any specific experience with this kind of setup? I'm particularly interested in the practicalities of archiving. Thanks, Matt -- Red Hat, Global Professional Services M: +44 (0)7977 267231 GPG ID: D33C3490 GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490 --=-Ffocwyqu3zfjqWFn6X1k Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit I have what I suspect is a fairly common requirement for immediate log file security for auditing. At the same time, I have the same requirement for logging several arbitrary applications. After considering various options, I'm currently looking at writing logs to NetApp SnapLock: http://www.netapp.com/products/software/snaplock.html. Does anybody have any specific experience with this kind of setup? I'm particularly interested in the practicalities of archiving.

Thanks,

Matt
-- 
Red Hat, Global Professional Services

M:       +44 (0)7977 267231
GPG ID:  D33C3490
GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490
--=-Ffocwyqu3zfjqWFn6X1k-- --===============1030233962== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============1030233962==--