The Journal - a proposed syslog replacement

Secondarily, the only way to do secure logging properly is to send logs to another machine, preferably at some point involving physical hard copy. I see all of these reactionary claims post the kernel.org break-in, some boarding on total nonsense (like the systems now configured to blow away any ssh keys found stored therein - hint, there are many other things someone could do to compromise global security, this is caring way too much about one thing). But anyway, to get back to the point, the *only* *ONLY* way to do security when it comes to logging is airgap separated external one-way logging to another machine. ONLY.