log-user-session is shell-wrapper that can be used via ForceCommand to implement full logging of user sessions. It supports the following features: - Flexible directory structure for the shell output log files. - Support setuid-mode to write the files as another user. - Properly starts the user shell as login shell. - Optionally log only the command line of remote commands instead of the full output. It is open source and available here: https://github.com/open-ch/log-user-session -- konrad bucheli security engineer open systems ag raeffelstrasse 29 ch-8045 zurich t: +41 58 100 10 10 f: +41 58 100 10 11 kb@xxxxxxx http://www.open.ch _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev