syslog from chrooted environment

Nico Kadel-Garcia nkadel at gmail.com
Tue Jul 25 10:39:02 AEST 2017


On Mon, Jul 24, 2017 at 11:55 AM, Mike Tancsa <mike at sentex.net> wrote:
> I have a somewhat busy sftp server where the users are all chrooted into
> their home directory. In order to log all the commands they enter, I
> have to create a /dev/log entry and hard link in their home directory so
> that syslog works for their commands
>
> Match user *
>    ForceCommand internal-sftp -f local1 -l verbose
>
> Everything works, but its a bit of a pain if someone restarts syslogd
> and forgets to recreate the hardlinks (needed on FreeBSD anyways).
>
> Are there any alternatives to this method ?  Are there any patches
> thoughts for supplementary logging of some sort of sshd that can work
> around these logging constraints ?
>
>         ---Mike

Why are the targets of the hardlinks evaporating on rebooting? Is that
a FreeBSD'ism?


More information about the openssh-unix-dev mailing list