SFTP Logging

[Jason Stone]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> > Has there been any thought given to giving the SFTP subsystem better
> > logging capabilities?  We are looking to replace FTP, Telnet, and
> > Rexec completely, but our FTP is presently logged and any
> > replacement for it would also need to be logged.  Specifically, we
> > need to know about file uploads and downloads, deletions. et cetera.
> 
> Remember that it will amout to moot unless you use a restricted shell,
> like the one I have posted to this list earlier, as otherwise users
> can just use their own SFTP server - without your logging
> capabilities.

"Unless you're using keys."

I'm always in favor of more logging options.


 -Jason

 -----------------------------------------------------------------------
 I worry about my child and the Internet all the time, even though she's
 too young to have logged on yet.  Here's what I worry about.  I worry
 that 10 or 15 years from now, she will come to me and say "Daddy, where
 were you when they took freedom of the press away from the Internet?"
	-- Mike Godwin

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: See https://private.idealab.com/public/jason/jason.gpg

iD8DBQE7KWQpswXMWWtptckRAkM+AJwJtKC59RmEen22VsRTaUaLPC1F9gCg4KOJ
Rkz/36LwU6439GveFa8GQk4=
=0Ugj
-----END PGP SIGNATURE-----