Bug 363

Summary: No logging of SSH activities under Solaris BSM
Product: Portable OpenSSH Reporter: Dirk Bockmann <dirk.bockmann>
Component: sshAssignee: OpenSSH Bugzilla mailing list <openssh-bugs>
Status: CLOSED DUPLICATE    
Severity: normal    
Priority: P2    
Version: -current   
Hardware: UltraSPARC   
OS: Solaris   

Description Dirk Bockmann 2002-07-19 15:48:22 AEST
Hi,
   We have been requested to move to comprehensive logging using Solaris BSM.  
Our testing shows that transactions via the ssh interface are not logged.  Sun 
have explained this by the following response.  We are interested in the 
comment that Sun has provided Openssh with code to enable BSM logging and if 
there is any intention to proceed with this please?  :------

Prior to the release of the Sun version of OpenSSH with Solaris 9, I don't
believe that there exists a version of SSH which is BSM enabled. I.e, an
application or service has to have BSM specific code in it to register
itself with the audit daemon. 

The SSH with Solaris 9 is not supported on previous versions of Solaris. I
don't know if that means that it won't work....

SSH does log its activity via syslogd, so you might find what you are
looking
for in /var/log/syslog (or wherever you're pointing syslogd to). 

Sun has given the BSM code for SSH back to OpenSSH. I don't know whether
this means that anyone has done a generic version for Solaris that does include
BSM capabilities that will run on 2.5.1 etc.
Comment 1 Ben Lindstrom 2002-07-20 03:58:41 AEST

*** This bug has been marked as a duplicate of 125 ***
Comment 2 Damien Miller 2004-04-14 12:24:18 AEST
Mass change of RESOLVED bugs to CLOSED