Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: log scp interactions with openssh

Subject: Re: log scp interactions with openssh
Date: Mon, 12 Sep 2005 18:02:57 +0300 (IDT)
Hi.

On Sat, 10 Sep 2005 diabolo@cotse.net wrote:
I'm looking for a solution to log scp interactions on my server. I use
currently openssh version 4.1p1 with the sftplogging patch. For
users who need no shell access I use rssh to disable scp and force
the use of sftp. But for users which needs shell access I do not
know how to disable scp or to establish an scp logging.

Is there a openssh patch for scp logging available?

How can I disable scp for shell users?

Probably, you can somehow disable scp, but what you will get? A user
with shell access can just execute

  $ wget http://his-site/new-file

or something similar to

  $ cat > new-file
  some data
  EOF

and there are quite a few of packages which allows to automates this
for large and binary files.

-- 
Regards,
ASK

<Prev in Thread] Current Thread [Next in Thread>