[ale] Auditing root shells
Christopher Fowler
cfowler at outpostsentinel.com
Mon Sep 19 11:16:16 EDT 2005
On Mon, 2005-09-19 at 10:18 -0400, James P. Kinney III wrote:
> Serial console is an excellent idea. I now recall from "The Cuckoos
> Egg"
> the use of a serial console split on the wire to a line printer that
> was
> used to capture the command during a breaking.
I think the problem with capturing output via a wire is that you can
only monitor Tx on either the device or user. A console management
device sits between the user and the server capturing all output.
Plus its more economical than having a printer for each server.
More information about the Ale
mailing list