Re: Fwd: sshd patch to fix BREAK-IN pattern and add pam_chroot tracking

Mike Tremaine <[email protected]>
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>

Half this patch was already in CVS [the BREAK-IN part]

I added this for the pam_chroot

[mgt@dwarfstar services]$ cvs diff sshd
Index: sshd
===================================================================
RCS file: /var/cvs/logwatch/scripts/services/sshd,v
retrieving revision 1.75
diff -r1.75 sshd
195a196
 > my %PamChroot = ();
367a369,370
 >    } elsif ( my ($Reason) = ( $ThisLine =~ 
m/pam_chroot\(.+\):\s+([^:])/)) {
 >       $PamChroot{$Reason}++;
703a707,713
 > if (keys %PamChroot) {
 >    print "\nPAM chroot:\n";
 >    foreach my $Reason (sort {$a cmp $b} keys %PamChroot) {
 >       print "   $Reason : $PamChroot{$Reason} Time(s)\n";
 >    }
 > }
 >

-Mike
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.