Mercurial > dropbear
changeset 349:dba106bf6b34
Add (disabled by default) LOG_COMMANDS option to log the commands executed
by clients.
| author | Matt Johnston <matt@ucc.asn.au> |
|---|---|
| date | Mon, 07 Aug 2006 13:41:16 +0000 |
| parents | 03f65e461915 |
| children | 01e4180895ba |
| files | options.h svr-chansession.c |
| diffstat | 2 files changed, 14 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/options.h Sat Mar 11 14:59:34 2006 +0000 +++ b/options.h Mon Aug 07 13:41:16 2006 +0000 @@ -199,8 +199,10 @@ * not using the Dropbear client, you'll need to change it */ #define _PATH_SSH_PROGRAM "/usr/bin/dbclient" -/* Multi-purpose binary configuration has now moved. Look at the top - * of the Makefile for instructions, or INSTALL */ +/* Whether to log commands executed by a client. This only logs the + * (single) command sent to the server, not what a user did in a + * shell/sftp session etc. */ +/* #define LOG_COMMANDS */ /******************************************************************* * You shouldn't edit below here unless you know you need to.
--- a/svr-chansession.c Sat Mar 11 14:59:34 2006 +0000 +++ b/svr-chansession.c Mon Aug 07 13:41:16 2006 +0000 @@ -588,6 +588,16 @@ } } +#ifdef LOG_COMMANDS + if (chansess->cmd) { + dropbear_log(LOG_INFO, "user %s executing '%s'", + ses.authstate.printableuser, chansess->cmd); + } else { + dropbear_log(LOG_INFO, "user %s executing login shell", + ses.authstate.printableuser); + } +#endif + if (chansess->term == NULL) { /* no pty */ ret = noptycommand(channel, chansess);