Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread Grant Taylor
On 09/11/2018 06:51 AM, wiicontrol...@gmail.com wrote: If by “all” activity, the customer means all activity, pam_tty_audit is the only solution I have heard of that fits the bill:

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread Grant Taylor
On 09/11/2018 04:52 AM, Stefan G. Weichinger wrote: Is there a recommended way to track the logs? Specific setup for syslog-ng or in my case journald? Tracking log files is different than getting things into log files. By default, shell history is decidedly excluded from system logs. There

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread wiicontroller
On 2018年09月11日 12時52分, Stefan G. Weichinger wrote: At a customer we were asked to log/protocol all my administrative activity for potential audits etc If by “all” activity, the customer means all activity, pam_tty_audit is the only solution I have heard of that fits the bill:

Re: [gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Mick
On Tuesday, 11 September 2018 10:48:59 BST Stefan G. Weichinger wrote: > I got the job to admin a gentoo server that was configured and setup by > a former admin. > > No surprise that it is outdated ... > > It runs with profile "hardened/linux/amd64" and kernel 4.1.15-gentoo-r1 This is a rather

[gentoo-user] logging my activity for audits

2018-09-11 Thread Stefan G. Weichinger
At a customer we were asked to log/protocol all my administrative activity for potential audits etc My admin-work is basically 98% ssh and maybe some additional tasks done via virt-manager (logging the work inside the VMs there is another topic ... I realize that right now). Is there a

Re: [gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Stefan G. Weichinger
Am 11.09.18 um 11:48 schrieb Stefan G. Weichinger: Right now I always get this when I run "make bzImage" ( # make bzImage   CHK include/config/kernel.release   CHK include/generated/uapi/linux/version.h   CHK include/generated/utsrelease.h   CC  kernel/bounds.s

[gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Stefan G. Weichinger
I got the job to admin a gentoo server that was configured and setup by a former admin. No surprise that it is outdated ... It runs with profile "hardened/linux/amd64" and kernel 4.1.15-gentoo-r1 That kernel does not have the necessary flags enabled to support EXT4 ACLs ... At first I

Re: : Re: [gentoo-user] Endlessly growing xorg-session.log

2018-09-11 Thread Mick
On Tuesday, 11 September 2018 09:02:18 BST Peter Humphrey wrote: > Mick wrote : > > On Monday, 10 September 2018 09:49:16 BST Peter Humphrey wrote: > > > Hello list, [snip ...] > > > It was mostly full of repetitions of this: > > > [warn] epoll_wait: Bad file descriptor The epoll API performs

Re:: Re: [gentoo-user] Endlessly growing xorg-session.log

2018-09-11 Thread Peter Humphrey
Mick wrote : > On Monday, 10 September 2018 09:49:16 BST Peter Humphrey wrote: > > Hello list, > > > > I've been suffering some very odd problems recently, including lost > e-mails, > > but I've finally found something that could explain them all: disk space > > down to zero in /home. > > > >