Accounting changes

Diomidis Spinellis dds at aueb.gr
Thu Apr 19 21:22:10 UTC 2007


Poul-Henning Kamp wrote:
> In message <20070419212253.L2913 at fledge.watson.org>, Robert Watson writes:
> 
>>> 	__dev_t   ac_tty;		/* controlling tty */
> 
> This field is useless, nobody uses hardwired RS-232 terminals
> anymore.
> 
> What we should do is add a systemcall or sysctl, so session creators
> like getty, sshd and similar can install a session indentifying string
> on the session, and then dump that in the accounting.
> 
> sshd would log IP+port and possibly also credential used for auth.
> 

Isn't this purpose mostly served by joining the accounting record with 
wtmp on the ll_line field to obtain the IP address from the ll_host field?



More information about the freebsd-arch mailing list