'internal-sftp' subsystem from SSH daemon does not use the specified log-facility
Issue
- We are using the internal-sftp subsystem built-in to sshd for the purposes of allowing a jailed environment for users to upload/download files.
- We have specified a particular logging facility in the configuration file, like so:
[...]
Subsystem sftp internal-sftp -l VERBOSE -f LOCAL6
[...]
- Moreover, we configured the logging for the chrooted environment by following this article
- However, sftp-related messages aren't logged using the specified log facility. Messages are sent using the default sshd logging facility.
- We have disabled SELinux.
- This setup was working up until December 2012. An update after that broke the functionality for RHEL 6 as well as RHEL 5.
Environment
- Red Hat Enterprise Linux (RHEL) 5
- Red Hat Enterprise Linux (RHEL) 6
- sshd
- rsyslog / syslogd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.