-
squash committed patchset 12 of module sudosh to the sudosh2 CVS repository, changing 2 files.
2008-08-26 20:27:10 UTC in sudosh2
-
Please try this patch. It is already slated for inclusion in the next release of sudosh2.
File Added: p1.
2008-08-10 01:21:43 UTC in sudosh2
-
I'll do what I can to clean up any external sites that refer to syslogging of keystrokes. The information is obviously outdated or inaccurate (I'm not sure if it ever actually applied to dhanks' tree either).
2008-05-05 20:45:53 UTC in sudosh2
-
Sorry for the delay - for whatever reason I am not getting tracker alerts.
I will look into adding a config option for this for 1.0.3.
2008-04-29 12:25:13 UTC in sudosh2
-
Sorry for the delay - for whatever reason I am not getting tracker alerts.
I will look into adding an option for not recording keyboard input for those folks whose auditing requirements allow it. This should be a relatively easy change, while giving you 98% of the functionality otherwise.
2008-04-29 12:22:17 UTC in sudosh2
-
Sorry for the delay, for whatever reason I am not getting tracker alerts.
Syslog isn't really an appropriate method of moving this data around. The current documentation doesn't seem to indicate that type of functionality - Is there a particular statement the seems vague?.
2008-04-29 12:18:38 UTC in sudosh2
-
That is not the way the -c arg allow is supposed to be used. This option is supposed to be used when sudosh is used as a user's login shell. By default this will only allow you to have interactive shells, and scp, sftp, etc will not function. The -c arg allow lets you specify those non-interactive programs you would like them to be able to use, thus allowing scp, sftp, etc to function. This is...
2008-04-08 12:38:26 UTC in sudosh2
-
Here is a quick and dirty method to achieve what you're after.
1. Adjust your authorized_keys file similar to how you mentioned above: 'environment="SUDOSH_USER=keyuser1"' for each key. Make sure sshd_config has "PermitUserEnvironment yes"
2. Compile the attached source (tested on Ubuntu Gutsy), install as /usr/local/bin/sudosh-switcher
3. For each user, make sure there is a valid user on...
2008-03-30 01:34:02 UTC in sudosh2
-
From my perspective, sudosh2 is really designed to function as an auditing tool in an audited environment. This type of functionality would go outside the realm of that, as logging in directly as root regardless of mechanism generally won't get through any major vendor security audit.
With that said, you could likely duplicate this functionality through a wrapper on your end, without needing...
2008-03-29 13:57:59 UTC in sudosh2
-
squash committed patchset 11 of module sudosh to the sudosh2 CVS repository, changing 2 files.
2008-03-07 16:23:41 UTC in sudosh2
