[PATCH] add log= directive to authorized_hosts

Ángel González keisial at gmail.com
Sun Oct 9 05:10:13 EST 2011


Alex Bligh wrote:
> The log line always begins the same way, i.e. the current way, so the
> log line would in this case read:
>
> Oct  8 11:04:47 test sshd[18469]: Accepted publickey for eve from 
> 10.11.12.13 port 55580 ssh2 Invalid user root from 192.168.1.1
>
> Now, if someone is so silly as to parse the log for a regexp and not
> write the regexp properly then I think they deserve all they get.

I know, the problem would be the regex. But I'm sure there are unanchored
regexes in use out there, for parsing those logs.




More information about the openssh-unix-dev mailing list