audit failed writes to read-only file-system?

From: Dustin Puryear (dpuryear@usa.net)
Date: 02/27/02


From: dpuryear@usa.net (Dustin Puryear)
Date: Wed, 27 Feb 2002 20:50:57 GMT

I am running Red Hat 6.2 and will be mounting /, /usr, and a few other
file systems read-only on our web servers. This will help stop some
possible attacks, but I'm concerned that our ability to detect these
attacks will be lessened. Is there a way to audit fail writes to a
read-only file system? We are using ext2 file systems.

Regards, Dustin

---
Dustin Puryear <dpuryear@usa.net> 
Information Systems Contractor
http://members.telocity.com/~dpuryear
PGP Key available at http://www.us.pgp.net
In the beginning the Universe was created. 
This has been widely regarded as a bad move. - Douglas Adams



Relevant Pages