<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Oops, sorry. I am switching between 2 lists and I got muddled
...<br>
</p>
<div class="moz-cite-prefix">On 20/02/2019 21:55, Edinburgh Linux
Users Group wrote:<br>
</div>
<blockquote type="cite"
cite="mid:mailman.122.1550699728.765.edlug@lists.edlug.org.uk">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<p>A reply from a member of Baen's Bar.<br>
</p>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject:
</th>
<td>Re: [EdLUG] Fwd: [Baen Baen's Bar] Cybersecurity</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date:
</th>
<td>Wed, 20 Feb 2019 21:38:07 +0000</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From:
</th>
<td>Edinburgh Linux Users Group <a
class="moz-txt-link-rfc2396E"
href="mailto:edlug@lists.edlug.org.uk"
moz-do-not-send="true"><edlug@lists.edlug.org.uk></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Reply-To:
</th>
<td><a class="moz-txt-link-abbreviated"
href="mailto:edlug@lists.edlug.org.uk"
moz-do-not-send="true">edlug@lists.edlug.org.uk</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated"
href="mailto:edlug@lists.edlug.org.uk"
moz-do-not-send="true">edlug@lists.edlug.org.uk</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<p>You were 100% correct! Root passwords are sacrosanct. <br>
</p>
<div class="moz-cite-prefix">On 20/02/2019 19:39, Edinmuburgh
Linux Users Group wrote:<br>
</div>
<blockquote type="cite"
cite="mid:mailman.104.1550691592.765.edlug@lists.edlug.org.uk">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<div dir="auto">
<div dir="auto"><br>
</div>
<div dir="auto">When I was asked to provide the root
passwords to an auditor, I refused because I thought that
was a risk in itself. The auditor was apparently impressed
by this attitude because they never asked again ;-) (did I
pass the test?)</div>
<div dir="auto"><br>
</div>
<div dir="auto">But (after finding out about cfg2html) I
would offer them full documention of the systems involved,
for example what is produced by cfg2html (https<span
style="font-size: 12pt;">://www.cfg2html.com/)</span></div>
<div dir="auto"><br>
</div>
<div dir="auto">If they respond to that in a manner that
would suggest that they understood it, and they would want
more, I would give it to them (but still not the root
password - if I could not avoid giving it to them, I would
have to change it afterwards).</div>
<div dir="auto"><br>
</div>
<div dir="auto">For your consideration</div>
<div dir="auto">Geetam</div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div id="aqm-signature" dir="auto" style="color: black;">
<div dir="auto">---</div>
<div dir="auto">I don't know</div>
<div dir="auto">...</div>
<div dir="auto">I don't know what it is</div>
<div dir="auto">...</div>
<div dir="auto">I don't know what it is that I don't know</div>
<div dir="auto"><br>
</div>
<div dir="auto">Isn't it beautiful</div>
<div dir="auto"><br>
</div>
</div>
<div dir="auto"><br>
</div>
<div id="aqm-original" style="color: black;">
<!-- body start -->
<div class="aqm-original-body" style="color: #000000;
background: #ffffff;">
<div style="color: black;">
<p style="color: black; font-size: 10pt; font-family:
sans-serif; margin: 8pt 0;">On 19 February 2019
19:12:34 Edinburgh Linux Users Group <a
class="moz-txt-link-rfc2396E"
href="mailto:edlug@lists.edlug.org.uk"
moz-do-not-send="true"><edlug@lists.edlug.org.uk></a>
wrote:</p>
<blockquote type="cite" class="gmail_quote"
style="margin: 0 0 0 0.75ex; border-left: 1px solid
#808080; padding-left: 0.75ex;">
<p>I just received this email. Can anyone advise
the OP on this question ?</p>
<p>Andrew Ramage</p>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table"
cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">Subject: </th>
<td>[Baen Baen's Bar] Cybersecurity</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">Date: </th>
<td>Tue, 19 Feb 2019 11:32:46 -0600vise</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">From: </th>
<td>piobair <a
class="moz-txt-link-rfc2396E"
href="mailto:piobair@mindspring.com"
moz-do-not-send="true"><piobair@mindspring.com></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">Reply-To: </th>
<td><a class="moz-txt-link-abbreviated"
href="mailto:baens_bar@bar.baen.com"
moz-do-not-send="true">baens_bar@bar.baen.com</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">Organization: </th>
<td>Baen's Bar</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated"
href="mailto:baens_bar@bar.baen.com"
moz-do-not-send="true">baens_bar@bar.baen.com</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap"
align="RIGHT">Newsgroups: </th>
<td>Baen_Baens_Bar</td>
</tr>
</tbody>
</table>
<br>
<br>
<pre style="white-space:pre-wrap; word-wrap: break-word; font-family: Verdana,Geneva,Lucida,'Lucida Grande',Arial,Helvetica,Sans-serif;">The Board of Directors overseeing a friend of mine has decided that they need a security audit by an independent auditor. My friend's entire system is running on Linux with Linux servers and (mostly) thin clients.
He put out an RFP and, in his words, they want the keys to the front door in order to see if the china cabinet is locked.
Can an adequate audit be made from the /var/log files?</pre>
</div>
<div>-- </div>
<div>EdLUG mailing list</div>
<div><a class="aqm-autolink aqm-autowrap"
href="mailto:EdLUG%40lists.edlug.org.uk"
moz-do-not-send="true">EdLUG@lists.edlug.org.uk</a></div>
<div><a class="aqm-autolink aqm-autowrap"
href="https://lists.edlug.org.uk/mailman/listinfo/edlug"
moz-do-not-send="true">https://lists.edlug.org.uk/mailman/listinfo/edlug</a></div>
</blockquote>
</div>
</div>
<!-- body end --> </div>
<div dir="auto"><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
</body>
</html>