boot -s - can i detect intruder

Nikolay Kanchev niki at amk-drives.bg
Tue Sep 16 01:02:57 PDT 2003


Hi list

Several people have physical access to my FreeBSD box and I have the feeling
that somebody try to get access with boot -s options . Can I log activity
after boot -s option (change user password, install software and etc.).
I use boot -s and change user password, but after reboot i can't find this
atcivity in log files.
The BSD box is shutdown and run again many time at day.

Best regards,

Nikolay Kanchev

E-mail: niki at amk-drives.bg



More information about the freebsd-security mailing list