| Summary: | Openssh sftplogging patch for 4.4p1 is here! | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Hans Rakers <hans> |
| Component: | New packages | Assignee: | Gentoo's Team for Core System packages <base-system> |
| Status: | RESOLVED WONTFIX | ||
| Severity: | normal | CC: | jakub |
| Priority: | High | ||
| Version: | 2006.1 | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://sftplogging.sourceforge.net/ | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: | openssh-4.4_p1-r7.ebuild w/ "sftplogging" use flag | ||
|
Description
Hans Rakers
2006-11-08 01:51:02 UTC
Well, I fail to see what patch are you talking about since the functionality requires no patch at all w/ 4.4_p1 (go read Bug 154215). Well maybe you should've checked the url i posted ;) quote: "Sorry it's taking so long, but openssh changed their code (in fact they added logging, but they did not add any control of chown, chmod or umask)" I cant be bothered about the logging, it's mostly the umask part i'm interested in and used sftplogging for (and i'm probably not the only one) Shrug... we're not patching anymore; get said features integrated upstream When I emerged "openssh-4.4_p1-r6" I noticed support for the sftplogging use flag was gone.
After emerging I could no longer log in via ssh, and after checking around a bit I realised that sshd choked on my /etc/ssh/sshd_config. Trying to start ssh from the command line (as root) gets me:
# /usr/sbin/sshd
/etc/ssh/sshd_config: line 109: Bad configuration option: LogSftp
/etc/ssh/sshd_config: terminating, 1 bad configuration options
Everything works fine if I remove all sftp options from my sshd_config, but then logging of any sftp activity is *far* from the level of detail I used to have with sftplogging enabled. :(
Turns out the sftplogging patch is still around, and has been updated to work with openssh-4.4, though (see http://sftplogging.sourceforge.net). So I updated the ebuild accordingly.
So here it is. openssh-4.4_p1-r6, *with* sftplogging support.
It's marked as unstable for all platforms, but works fine for me, ymmv tho.
Created attachment 102370 [details] openssh-4.4_p1-r7.ebuild w/ "sftplogging" use flag openssh-4.4_p1-r7.ebuild uses the "sftplogging" patch from http://sftplogging.sourceforge.net/ to add (or put back) the USE flag with the same name. Sftplogging gives a higher level of details in the logging made by the sftp-server, it also gives you control over chroot, chmod and umask settings from sshd_config. |
