Re: Extra OpenSSH logging for tracing SSH connections and tunnels

Am 24.04.26 um 16:07 schrieb Zoltan Fridrich:
> - log every outgoing SSH connection on the client side including user ID
>   and command details

Ignoring your other requirement for the moment: Why would you trust the 
user to use the "ssh" executable you provided? (Or that he won't finagle 
with chroot() to try to break the syslogging, forward the connection 
through a local socat to remove the actual server info from the recorded 
ssh command line, yadda yadda.)

I'd rather trust the logs of auditd to catch the command, and iptables 
rules to record the actual outgoing connection ...

Kind regards,
-- 
Jochen Bern
Systemingenieur
Binect GmbH

_______________________________________________
openssh-unix-dev mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev