Accounting changes
Diomidis Spinellis
dds at aueb.gr
Thu Apr 19 21:22:10 UTC 2007
Poul-Henning Kamp wrote:
> In message <20070419212253.L2913 at fledge.watson.org>, Robert Watson writes:
>
>>> __dev_t ac_tty; /* controlling tty */
>
> This field is useless, nobody uses hardwired RS-232 terminals
> anymore.
>
> What we should do is add a systemcall or sysctl, so session creators
> like getty, sshd and similar can install a session indentifying string
> on the session, and then dump that in the accounting.
>
> sshd would log IP+port and possibly also credential used for auth.
>
Isn't this purpose mostly served by joining the accounting record with
wtmp on the ll_line field to obtain the IP address from the ll_host field?
More information about the freebsd-arch
mailing list