SecurityInnovation/TeamMentor-PHP — Issue #40: Log Files Are Protected
Author: SergeTruth
Created: 2011-11-09 13:44:30+00:00
State: open

"Use a custom error handler that calls syslog to deliver error messages, configuring syslog securely. On windows, this goes to the event log.
If this isn't an option, major operating systems allow a file to only be appended to (not read or modified).
Linux: http://answers.oreilly.com/topic/424-how-to-protect-our-logs-fromtampering/
BSD: http://www.bsdguides.org/guides/freebsd/security/harden.php
Windows: http://support.microsoft.com/kb/308419
Additional Information: http://us.php.net/manual/en/function.set-error-handler.php http://php.net/manual/en/function.syslog.php
Related items: centralize logging"