On Saturday, November 24, 2018 10:37:41 AM EST Ranran wrote:
Is there a way to encrypt the auditd logs which are saved to disk?
The system need to save logs from local into disk (not a remote
connection), but it should be saved encryped. Is there a way to do it
Typically audit logs are protected by virtue of needing root to read
anything. An untrusted root user is something Linux isn't designed for.
-Steve