How good is the idea of preserving the Linux configuration files in version control system (SVN, for example)? For example, to see all changes in the firewall, change history. In particular, it is possible to keep these groups of files –
- Access files
- Booting and login / logout
- File system
- System administration
- Networking
- System commands
- Daemons
…
Ie For example, I am making changes to the firewall and do commit the file to the repository. Then, if something goes not so, I can extract the file and compare it to that is. This can help detect some unauthorized access.
This is old hat, so to speak.
Chek this out.