Bug 225 - Secure audit trails so they cannot be altered
Summary: Secure audit trails so they cannot be altered
Status: CONFIRMED
Alias: None
Product: E3
Classification: Unclassified
Component: core (show other bugs)
Version: ---
Hardware: All All
: P2 normal
Target Milestone: ---
Assignee: Richard Harms
QA Contact:
URL:
Keywords:
Depends on:
Blocks: 219
  Show dependency tree / graph
 
Reported: 2006-09-10 14:31 CDT by Richard Harms
Modified: 2017-07-15 11:04 CDT (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Harms 2006-09-10 14:31:58 CDT 
10.5 Secure audit trails so they cannot be altered. 
10.5.1 Limit viewing of audit trails to those with a job-related need 
10.5.2 Protect audit trail files from unauthorized modifications 
10.5.3 Promptly back-up audit trail files to a centralized log server or media that is difficult to 
alter 
10.5.4 Copy logs for wireless networks onto a log server on the internal LAN. 
10.5.5 Use file integrity monitoring and change detection software on logs to ensure that existing 
log data cannot be changed without generating alerts (although new data being added 
should not cause an alert).