Re: Fwd: sshd patch to fix BREAK-IN pattern and add pam_chroot tracking
Mike Tremaine <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Half this patch was already in CVS [the BREAK-IN part]
I added this for the pam_chroot
[mgt@dwarfstar services]$ cvs diff sshd
Index: sshd
===================================================================
RCS file: /var/cvs/logwatch/scripts/services/sshd,v
retrieving revision 1.75
diff -r1.75 sshd
195a196
> my %PamChroot = ();
367a369,370
> } elsif ( my ($Reason) = ( $ThisLine =~
m/pam_chroot\(.+\):\s+([^:])/)) {
> $PamChroot{$Reason}++;
703a707,713
> if (keys %PamChroot) {
> print "\nPAM chroot:\n";
> foreach my $Reason (sort {$a cmp $b} keys %PamChroot) {
> print " $Reason : $PamChroot{$Reason} Time(s)\n";
> }
> }
>
-Mike