On Wed, May 21, 2008 at 11:18:25AM -0700, Russ Allbery wrote:
> "Withers John Z" <[EMAIL PROTECTED]> writes:
> 
> > I've been using RSSH on several of our servers.  Our security wizards
> > have observed that the users logging into the system with the RSSH shell
> > do not have their information updated in /var/log/lastlog.  This makes
> > the accounts look like they have not been logged in to.  Is this a known
> > problem or a configuration issue?
> 
> This is not something that the user's shell is responsible for.  It should
> be done before the shell is spawned.  So I would look at the login method
> and figure out why it's not writing to lastlog; I don't think the rssh
> code itself is involved.

This is true AFAIK (sshd should log this via PAM, if at all, not the
shell), but also it shouldn't really matter... the users' logins are
logged in syslog, if you have logging set up properly.  

-- 
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0x81CFE75D

Attachment: pgpE5TrdJmxUE.pgp
Description: PGP signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
rssh-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rssh-discuss

Reply via email to