USER_END for ssh?

Tomas Mraz tmraz at redhat.com
Mon Aug 22 09:40:45 UTC 2005


On Fri, 2005-08-19 at 17:56 -0400, Rob Myers wrote:
> On Wed, 2005-08-17 at 14:41 -0400, Steve Grubb wrote:
> > On Wednesday 17 August 2005 14:31, Rob Myers wrote:
> > > should there be a corresponding USER_END message for every USER_START
> > > message?
> > 
> > In theory, yes.
> > 
> > > i do not see any messages indicating the end of an ssh session, but the
> > > messages i expect are shown at the start of an ssh session.
> > 
> > Will check this out.
> 
> i filed a bug for this issue against FC4 here:
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166379

Sorry, but this must be fixed upstream first. It would require invasive
changes in how PAM calls are handled by sshd and we don't want to
diverge from upstream OpenSSH so much.

-- 
Tomas Mraz <tmraz at redhat.com>




More information about the Linux-audit mailing list