syslog from chrooted environment

Mike Tancsa mike at sentex.net
Tue Jul 25 01:55:54 AEST 2017


I have a somewhat busy sftp server where the users are all chrooted into
their home directory. In order to log all the commands they enter, I
have to create a /dev/log entry and hard link in their home directory so
that syslog works for their commands

Match user *
   ForceCommand internal-sftp -f local1 -l verbose

Everything works, but its a bit of a pain if someone restarts syslogd
and forgets to recreate the hardlinks (needed on FreeBSD anyways).

Are there any alternatives to this method ?  Are there any patches
thoughts for supplementary logging of some sort of sshd that can work
around these logging constraints ?

	---Mike
-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/


More information about the openssh-unix-dev mailing list