USER_END for ssh?
Rob Myers
rob.myers at gtri.gatech.edu
Fri Aug 19 21:56:22 UTC 2005
On Wed, 2005-08-17 at 14:41 -0400, Steve Grubb wrote:
> On Wednesday 17 August 2005 14:31, Rob Myers wrote:
> > should there be a corresponding USER_END message for every USER_START
> > message?
>
> In theory, yes.
>
> > i do not see any messages indicating the end of an ssh session, but the
> > messages i expect are shown at the start of an ssh session.
>
> Will check this out.
i filed a bug for this issue against FC4 here:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166379
rob.
More information about the Linux-audit
mailing list