Re: WORM file system for logging

[Vinci Chou <vkmchou () hk super net>]

Andreas Siegert wrote: 

>  This still allows tampering by the sysadmin. The original idea behind
>  the WORM drive was to make it even temper proof against the admins.

We are using a small simple program running as a demon to look at those
logs we want to keep and write the logs record by record to an optical
drive on write-once media.  When we need to retrieve the log, another
program read everything from the media and separate them into the original
log files. Any comments on this approach ?

However, I don't think anything could be tamper proof against the admins,
if the admins have physical access to the drive or media or the system
itself (and by definition an admin must have access to the system).


Vinci