System Logging

What is System Logging ?

n  An important part of maintaining a secure system is keeping track of the activities that take place on the system. If you know what usually happens, such as understanding when users log into your system, you can use log files to spot unusual activity

n  Two main logging daemons

l  klogd                           :The kernel log daemon service logs kernel messages                                                  and events

l  syslogd                        :The syslog daemon logs all other process activity. You can use the log files that syslogd generates to track activities on your system

Log Files

n  /var/log/dmesg                        : Kernel log messages

n  /var/log/messages                   : Standard system error messages

n  /var/log/maillog                      : Mail System messages

n  /var/log/secure                        : Security, authentication, and xinetd messages

utmpdump /var/log/wtmp

YUM Server configuration steps

To solve the problem of dependency resolution and package location, volunteer programmers at Duke University developed Yellow dog Update, Modified or short for YUM. The system is based on repositories that hold RPMs and repodata file list. Yum server is the centralized server through which you can install all servers’ package. The data of Yum server is stored in /var/ftp/pub to install Yum server you should have minimum 7 GB  in /Var partition. If you don’t have var partition then you should create a new partition and mount with /var by using vi /etc/fstab.

LAB: - ---------------------------------------------------------------------------------------------

~] # create a drive like mkdir /popo

~] # mount /dev/cdrom /popo

~] # cd /popo/

Popo] # cd Server

Server] # rpm –ivh vsftpd (press tab key to complete the command)

Server] # rpm –ivh createrepo (press tab key to complete the command)

Server] # cp –rvf /popo/* /var/ftp/pub

Server] # cd /var/ftp/pub

Server] # cd Server

Server] # createrepo –v /var/ftp/pub/Server/

Server] # service vsftpd restart;chkconfig vsftpd on

Server] # service portmap restart;chkconfig portmap on

Server] # service iptables stop