> So create yourself a syslog group, change the permissions on /var/log,
> and put all the appropriate users (root, www, named, uucp, ...) into the 
> group.
already done :)
> As I said, tedious work, and doesn't necessarily solve the problem. If a
> local user wants to cause a denial of service against your machine
> there are *many* ways in which they can do it.

what if he have quotas on disk and CPU and process count???