Re: [SSHGuard-users] getting sshguard to work on macOS Big Sur

[Jin C. <js...@al...>]

> On Jun 15, 2021, at 10:15 PM, Kevin Zheng <kev...@gm...> wrote:
> 
> Hi Jin,
> 
> On 6/15/21 11:31 AM, Jin Choi wrote:
>> I noticed that sshguard was not working for me on recent versions of macOS because the necessary information from sshd wasn’t getting reported by the log stream. I dug into it a little bit and found the following to work (from https://superuser.com/questions/1565891/how-to-get-ssh-logs-and-send-to-remote-syslog-server-in-macos <https://superuser.com/questions/1565891/how-to-get-ssh-logs-and-send-to-remote-syslog-server-in-macos>):
>> LOGREADER="/usr/bin/log stream --process sshd --info --style syslog --predicate \"messageType = 'info'\""
> 
> Thanks for reporting this. Do you know if this new syntax is backwards-compatible with older versions like Catalina?

I just tried it in a 10.14 VM and it works there. In fact, it seems to more reliably report the info necessary for sshguard than the old method without the spew of unrelated messages from subsystems.