I work in college network. I have shared my computer password with few friends. So any of them can ssh/ scp on my system. Is there any way to generate the log of connection ( if some one make connection through ssh or copying using scp ) data. ( Just in case to see what they do on my system ) ?
I am using openssh-server in ubuntu 10.10 system.
It seems to me that we can generate log or can get notification for ssh connection ( by looking SSH_CONNECTION parameter ) but no way for scp, or is there any ?
EDIT: I little bit of solution : create a rc file inside .ssh directory and create log from that rc file.
Best Answer
By default, the OpenSSH server logs to the AUTH facility of syslog, at the INFO level. If you want to record more information - such as failed login attempts - you should increase the logging level to VERBOSE.
It's recommended to log more information if you're curious about malicious SSH traffic.
To increase the level, find the following line in your sshd_config:
LogLevel INFO and change it to this:
LogLevel VERBOSE Now all the details of ssh login attempts will be saved in your /var/log/auth.log file.
More info at: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring