Hello,

>>5) Log everything possible about user logins and commands.  Consider
>>moving logs to a second system on a regular basis to avoid potential log
>>compromises.
> Unfortunately I don't have a second system to move logs to, but I can
> see why it would be a very good idea.

Why don`t you mail them to a dummy mail accout (e.g
my_cryptic_mail_address_for_loging@...)?

-- 
Good Luck,
Leo.
-- 
gentoo-security@g.o mailing list