https://github.com/dimkr/logfence
An overlay that prevents log tampering
https://github.com/dimkr/logfence
Last synced: 7 months ago
JSON representation
An overlay that prevents log tampering
- Host: GitHub
- URL: https://github.com/dimkr/logfence
- Owner: dimkr
- License: mit
- Created: 2015-01-05T11:45:39.000Z (over 11 years ago)
- Default Branch: master
- Last Pushed: 2015-06-28T09:15:08.000Z (about 11 years ago)
- Last Synced: 2025-01-23T14:30:08.734Z (over 1 year ago)
- Language: C
- Size: 270 KB
- Stars: 4
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: COPYING
Awesome Lists containing this project
README
# logfence
## Overview
**logfence** is a [FUSE](http://fuse.sourceforge.net/) based file system that
acts as an overlay, which allows only one process to modify each file at a time.
It is designed to be a simple and effective, generic tool that prevents log
tampering transparently.
## Features
* Prevents a process from opening a file for writing, if another process writes
to it
* Prevents a process from deleting a file, if another process writes to it
* Prevents a process from _touching_ a file, if another process writes to it
* Logs all violations to the system log
## Usage Example
**Application A** ([Python](https://www.python.org/)) writes a log file
(_/var/log/fdfd_). The evil **application B** (another instance of
[Python](https://www.python.org/)) tries to ruin the log, but fails because
**logfence** prevents it from opening it for writing.
## Credits and Legal Information
compat/sys/queue.h was taken from [OpenBSD](http://www.openbsd.org/), for wider
compatibility with C libraries; see the legal information at the top.
**logfence** itself is _free_ and unencumbered software released under the terms
of the _MIT license_; see [COPYING](COPYING) for the license text. For a list of
its authors and contributors, see [AUTHORS](AUTHORS).