0

My /etc/ssh/ssh_config file have follow config

Subsystem sftp internal-sftp -f AUTH -l INFO
Match group tmrhackers
ChrootDirectory %h
ForceCommand internal-sftp
AllowTcpForwarding no

and the sftp work fine with chroot. The official troubleshooting suggest

Logging the built-in sftp-subsystem inside a chroot jail, defined by ChrootDirectory, needs a ./dev/log node to exist inside the jail.

However here is a group with many user,do I need to add ./dev/log in every users home path or do I have some way to work around?

2

However here is a group with many user,do I need to add ./dev/log in every users home path or do I have some way to work around?

Yes. There is currently no other way around, until other way will be accepted upstream in OpenSSH 7.6 or you will use something else (Fedora, RHEL) that already has this functionality.

  • after mkdir /dev/log and systemctl restart sshd I still can't see INFO level log in /vat/log/auth.log.If there something else need to be done? – Shihe Zhang Jul 11 '17 at 8:56
  • You need to add this socket (full path) to the syslog to gather the information from it). Also the log is not a directory! – Jakuje Jul 11 '17 at 8:58
  • I tried sudo syslogd -a /home/user/dev/log but still didn't find the INFO level log in syslog or auth.log. – Shihe Zhang Jul 11 '17 at 9:22

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.