Getting SFTP logs from a chroot jail
 

Hi all,

I’m trying to get SFTP logs working for a few clients we have here. Up till now we haven’t had any logs for the SFTP stuff and its caused us some headaches.

My test server is CentOS 5.3 running openssh 5.1p1. The SFTP users are jailed into their home directories for obvious reasons.

I’ve enabled SFTP logging in the sshd_config file and it works fine if the user is not jailed… but when I jail the user all logging stops.

According to the manpage for syslogd you can use -a to specify additional sockets which is needed for the chroot environment.

So I created a new socket using mksock in /jail/dev/log and am running the syslog deamon with the –a /jail/dev/log option (ps –ef confirms it).

Yet still no logs are appearing. Any suggestions as to what I’m missing?

Thanks,
-Shawn

what happens if you do ln -ns /var/log/sftp to /jail/dev/log? This should make the system sftp log readable to the jailed users.