The 1st item could be hacked in an unportable way by marking error logs as append-only (chflags unappnd on mac, chattr +a on Linux)
The 1st item could be hacked in an unportable way by marking error logs as append-only (chflags unappnd on mac, chattr +a on Linux)