Timeline for Multi-factor auth into centralized log server
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 24, 2017 at 21:06 | comment | added | John Deters | I can't answer definitively for PCI DSS, but think about it: if an attacker can read the logs, he knows when he's successfully hidden his tracks. That's why we chose to lock down read-only access as well. | |
| Jan 24, 2017 at 20:24 | comment | added | Scott | What about Read access only and not Administrative access for someone with root access? There is some discussion and disagreement here about READ acess only based on 8.3.1 guidance for administrative access. | |
| Jan 24, 2017 at 14:49 | history | answered | John Deters | CC BY-SA 3.0 |