syslog from chrooted environment

Peter Stuge peter at stuge.se
Tue Jul 25 06:33:36 AEST 2017


Mike Tancsa wrote:
> Are there any alternatives to this method ?  Are there any patches
> thoughts for supplementary logging of some sort of sshd that can work
> around these logging constraints ?

openlog() doesn't return an fd, but keeps the syslog connection internal.

You could rewrite do_log() to not use openlog() but access /dev/syslog
directly, then sshd could pass the fd to child processes. It wouldn't
scale beyond OpenSSH though - ie. only for sftp, not for external
subsystems.

But maybe you can achieve a nicer shortcut for the internal-sftp case!


//Peter


More information about the openssh-unix-dev mailing list