Application log of Linux System Security

Many programs maintain logs to reflect the security status of the system. The su command allows the user to obtain permissions from another user, so its security is very important. Its file is sulog, and sudolog is also used. in addition, Http servers such as Apache have two logs: access_log client access logs) and error_log service error logs ). FTP service logs are stored in xferlog files, while Linux Mail Delivery Service sendmail logs are generally stored in maillog files.
The creation and use of program logs depend largely on the user's good programming habits. For a good programmer, writing any program related to system security or network security should contain the log function, which not only facilitates program debugging and error correction, more importantly, the log analysis function can be provided to the application users, so that the system administrator can better master the running status of the program and even the system and take actions in a timely manner, eliminate and block accidents and malicious intrusions.

Related Articles]

• Practical Linux security

• Experience in ten Linux security management skills

• Basic Linux security management skills