Depends on the kind of audit, surely? <br><br>I don't see how any serious auditing can be done simply from the contents of syslog and other randomness in /var/log/<br><br>M<br><br>Please excuse my brevity, this has been sent from my mobile device. <div class="quote" style="line-height: 1.5"><br><br>-------- Original Message --------<br>Subject: [EdLUG] Fwd: [Baen Baen's Bar] Cybersecurity<br>From: Edinburgh Linux Users Group <edlug@lists.edlug.org.uk><br>To: Edinburgh Linux Users Group <edlug@lists.edlug.org.uk><br>CC: <br><br><br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I just received this email. Can anyone advise the OP on this
question ?</p>
<p>Andrew Ramage</p>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject:
</th>
<td>[Baen Baen's Bar] Cybersecurity</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date: </th>
<td>Tue, 19 Feb 2019 11:32:46 -0600vise</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From: </th>
<td>piobair <a class="moz-txt-link-rfc2396E" href="mailto:piobair@mindspring.com"><piobair@mindspring.com></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Reply-To:
</th>
<td><a class="moz-txt-link-abbreviated" href="mailto:baens_bar@bar.baen.com">baens_bar@bar.baen.com</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Organization:
</th>
<td>Baen's Bar</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:baens_bar@bar.baen.com">baens_bar@bar.baen.com</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Newsgroups:
</th>
<td>Baen_Baens_Bar</td>
</tr>
</tbody>
</table>
<br>
<br>
<pre style="white-space:pre-wrap; word-wrap: break-word; font-family: Verdana,Geneva,Lucida,'Lucida Grande',Arial,Helvetica,Sans-serif;">The Board of Directors overseeing a friend of mine has decided that they need a security audit by an independent auditor. My friend's entire system is running on Linux with Linux servers and (mostly) thin clients.
He put out an RFP and, in his words, they want the keys to the front door in order to see if the china cabinet is locked.
Can an adequate audit be made from the /var/log files?</pre>
</div>
</body>
</html>
</blockquote></div>