Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| auditdistd [2012/03/18 02:37] – PawelJakubDawidek | auditdistd [2018/07/17 21:40] (current) – add to CategoryHowTo MateuszPiotrowski | ||
|---|---|---|---|
| Line 10: | Line 10: | ||
| One of the key purposes of logging security events is postmortem analysis in | One of the key purposes of logging security events is postmortem analysis in | ||
| - | case of system compromise. Currently the kernel can push audit records directly | + | case of system compromise. Currently, the kernel can push audit records directly |
| - | into a file or made them available through / | + | into a file or make them available through |
| logs are stored locally by the kernel, an attacker has access to them once the | logs are stored locally by the kernel, an attacker has access to them once the | ||
| system is compromised, | system is compromised, | ||
| Line 66: | Line 66: | ||
| < | < | ||
| # openssl req -x509 -nodes -newkey rsa:4096 -days 1825 -batch \ | # openssl req -x509 -nodes -newkey rsa:4096 -days 1825 -batch \ | ||
| - | -out / | + | -out /etc/security/ |
| - | # chmod 0600 / | + | |
| - | # chown root:wheel / | + | # chmod 0600 /etc/security/ |
| + | # chown root:wheel /etc/security/ | ||
| </ | </ | ||
| - | Print certificate public key's finger print is a form ready to be pasted into sender' | + | Print certificate public key's finger print in a form ready to be pasted into sender' |
| < | < | ||
| - | # openssl x509 -in / | + | # openssl x509 -in /etc/security/ |
| awk -F '[ =]' ' | awk -F '[ =]' ' | ||
| SHA256=8F: | SHA256=8F: | ||
| Line 86: | Line 87: | ||
| </ | </ | ||
| - | Create / | + | Create /etc/security/ |
| < | < | ||
| Line 102: | Line 103: | ||
| < | < | ||
| - | # chmod 600 / | + | # chmod 600 /etc/security/ |
| - | # chown root:wheel / | + | # chown root:wheel /etc/security/ |
| </ | </ | ||
| Line 167: | Line 168: | ||
| </ | </ | ||
| - | Create / | + | Create /etc/security/ |
| < | < | ||
| Line 182: | Line 183: | ||
| < | < | ||
| - | # chmod 600 / | + | # chmod 600 /etc/security/ |
| - | # chown root:wheel / | + | # chown root:wheel /etc/security/ |
| </ | </ | ||
| Line 197: | Line 198: | ||
| / | / | ||
| </ | </ | ||
| + | |||
| + | ---- | ||
| + | |||
| + | {{tag> | ||