linuxloggingtampering

How would you design a system to secure log information in Linux?


I am trying to learn how to secure a linux servers, I have started it with basic logging and authentication. I would like to know if anyone can steal my logging info in default mode.If yes, then how can i secure it.

I have already googling, but answers were not satisfactory.


Solution

  • I think a good point to start from is Security Enhanced Linux (SELinux). SELinux is a kernel module, which assists you in maintaining and also securing a Linux server system. For an introduction into SELinux you might look into the red hat Linux documentation

    With regard to logging you may consult: