Re: Security: logging

[Dima <dima@eris.dev.null>]

>>>Matthew Tebbens wrote:
  >
  >I'm using xinetd(xinetd.conf).
  >In xinetd.conf I have the following defaults for all services:
  >defaults
  >{
  >        log_type        = SYSLOG daemon
  >        log_on_success  = PID HOST EXIT DURATION
  >        log_on_failure  = HOST ATTEMPT RECORD
  >}
  >
  >Can I also specify another log for telnet, ftp, rlogin ?
  >So everything would be logged through SYSLOG, and services like those
  >above would be SYSLOG'ed AND logged in a seperate file. This way I would
  >feel better about catching any hacker.

Sorry to rtmf, but `man 5 xinetd.conf` will tell you all you need.
In a nutshell:
you can supply the entries above for each supported service,
you can specify syslog facility and level for log_type,
log_on* assignments are cumulative, i.e. what you define for a
service is added to default assignments above.

HTH
--
Dimitri




--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .