append only file system - selinux?

[Tim Daly]

Chris,

>here is my issue, for security certification purposes I need to be able 
>to create an append only file system for logs, such that no one *even 
>root* will be able to futz with the log files on my log server.

Write the files to CD-Rom in multi-session mode. It may even be the case
that there is a continuous-journal kind of file system (one in which the
journal is never collapsed). Such a file system would just continuously
write the file system to CD. This is conceptually a write-once tape.

Since you're not creating file logs at CD rates (one hopes) there will
be a window where someone could modify a log entry before you write it
to a session.

Tim Daly