Mailinglist Archive: opensuse-factory (564 mails)
| < Previous | Next > |
Re: [opensuse-factory] Human readable, what is that? (was [12.1] massive data loss in /var/tmp/)
- From: Cristian Rodríguez <crrodriguez@xxxxxxxxxxxx>
- Date: Tue, 27 Dec 2011 01:07:09 -0300
- Message-id: <4EF9446D.3010603@opensuse.org>
On 27/12/11 00:35, Claudio Freire wrote:
Sure, nothing blocks an attacker that has gained root access to simple rm -rf /var/log/journal/foo.journal
how ?
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx
Usually, you just want to fake or delete the last few records.
Deleting is quite simple.
Sure, nothing blocks an attacker that has gained root access to simple rm -rf /var/log/journal/foo.journal
Altering the latest records too, since they haven't yet been backed up.
how ?
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx
| < Previous | Next > |