With root privilege you can erase all of the audit logs. A malicious attack prob... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rsy96 on Aug 29, 2015 | parent | context | favorite | on: Linux workstation security checklist

With root privilege you can erase all of the audit logs. A malicious attack probably would do so if he/she cares about that.

fluidcruft on Aug 29, 2015 [–]

You can't erase remote logs, or logs written to a write-only logging device (the one's I've seen seem essentially to be a serial port/usb device that emulates a line printer).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact