sftp logging

[David Leonard]

Darren Tucker wrote:
> OpenSSH's sftp logging is turned on on by specifying "-l" to sftp-server.
>
> Trying making the "Subsystem sftp" line in sshd_config look something
> like the following and then restart sshd.
>
> Subsystem sftp /usr/libexec/sftp-server -l VERBOSE
>   


note that users can bypass your sftp-server log levels. e.g. by 
supplying the -s option to sftp with the full path to the sftp-server 
executable. However, they can supply their own logging levels,  which 
can be handy, eg

   $ sftp -s '/usr/libexec/sftp-server -lDEBUG -fDAEMON' remote-host

d



-- 
David Leonard                           d at adaptive-enterprises.com.au
                                        Ph:+61 404 844 850