Re: [suse-security] question about logging
Let me say also: better have /var/log/messages to gather up all from kernel, warn, popper, named, and then have logcheck installed for checking system events. You can have that emailed to root, possibly to another machine. Allow me then to ask the list: the bind8 has user named, and group named - contrary to earlier versions where root was user and group. Which are the files named writes into, so that I should chown and chgrp those files? Besides: Has anyone been ruinning sshd2? /-------------------------/ Antal Leisen webmaster@kreorg.hu Kreorg Educational Center Budapest, Hungary
webmaster:
Allow me then to ask the list: the bind8 has user named, and group named - contrary to earlier versions where root was user and group. Which are the files named writes into, so that I should chown and chgrp those files?
I would recommend that named should only be able to read the master file and to use a second directory for slave-zones which must be writeable for named Peter Wiersig
* webmaster wrote on Wed, Nov 22, 2000 at 10:04 +0100:
Let me say also: better have /var/log/messages to gather up all from kernel, warn, popper, named, and then have logcheck installed for checking system events. You can have that emailed to root, possibly to another machine.
the bind8 has user named, and group named - contrary to earlier versions where root was user and group. Which are the files named writes into, so that I should chown and chgrp those files?
If you use custumized logfiles, of course these. If you use dynamic zone update, for each (updated) zone file a log is written. Modified zones will be written to disk too (but only if you use dynamic updates). The default config will not write anything I suppose, since all logging is usually done via syslog, and dynamic zone updates are still uncommon I think. You should just watch syslog (or you own log file if you specified one) if you get errors or warnings :) oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.
participants (3)
-
Peter Wiersig
-
Steffen Dettmer
-
webmaster