0

My /etc/ssh/ssh_config file have follow config

Subsystem sftp internal-sftp -f AUTH -l INFO
Match group tmrhackers
ChrootDirectory %h
ForceCommand internal-sftp
AllowTcpForwarding no

and the sftp work fine with chroot. The official troubleshooting suggest

Logging the built-in sftp-subsystem inside a chroot jail, defined by ChrootDirectory, needs a ./dev/log node to exist inside the jail.

However here is a group with many user,do I need to add ./dev/log in every users home path or do I have some way to work around?

1 Answer 1

2

However here is a group with many user,do I need to add ./dev/log in every users home path or do I have some way to work around?

Yes. There is currently no other way around, until other way will be accepted upstream in OpenSSH 7.6 or you will use something else (Fedora, RHEL) that already has this functionality.

3
  • after mkdir /dev/log and systemctl restart sshd I still can't see INFO level log in /vat/log/auth.log.If there something else need to be done? Commented Jul 11, 2017 at 8:56
  • You need to add this socket (full path) to the syslog to gather the information from it). Also the log is not a directory!
    – Jakuje
    Commented Jul 11, 2017 at 8:58
  • I tried sudo syslogd -a /home/user/dev/log but still didn't find the INFO level log in syslog or auth.log. Commented Jul 11, 2017 at 9:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .