[PATCH] add log= directive to authorized_hosts
keisial at gmail.com
Sun Oct 9 05:10:13 EST 2011
Alex Bligh wrote:
> The log line always begins the same way, i.e. the current way, so the
> log line would in this case read:
> Oct 8 11:04:47 test sshd: Accepted publickey for eve from
> 10.11.12.13 port 55580 ssh2 Invalid user root from 192.168.1.1
> Now, if someone is so silly as to parse the log for a regexp and not
> write the regexp properly then I think they deserve all they get.
I know, the problem would be the regex. But I'm sure there are unanchored
regexes in use out there, for parsing those logs.
More information about the openssh-unix-dev