USER_END for ssh?

Rob Myers rob.myers at gtri.gatech.edu
Fri Aug 19 21:56:22 UTC 2005


On Wed, 2005-08-17 at 14:41 -0400, Steve Grubb wrote:
> On Wednesday 17 August 2005 14:31, Rob Myers wrote:
> > should there be a corresponding USER_END message for every USER_START
> > message?
> 
> In theory, yes.
> 
> > i do not see any messages indicating the end of an ssh session, but the
> > messages i expect are shown at the start of an ssh session.
> 
> Will check this out.

i filed a bug for this issue against FC4 here:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166379

rob.




More information about the Linux-audit mailing list