log-user-session is a program to store the content of a shell session (e.g via ssh) e.g. for auditing purposes. The tool is intended to be started by the ssh server daemon. The log is tamper-proof for non-root users.
Current maintainer: Konrad Bucheli kb@open.ch
Website: https://github.com/open-ch/log-user-session
A C compiler and make
must be installed prior to installation. You need also
autoconf
if you get the source code not via official release tarball (e.g.
via git or via automatic generated github source tarballs).
On a Debian-based Linux distribution, they can be installed like this:
sudo apt-get install autoconf gcc make
If you want to install log-user-session from source, proceed as follows:
Run [ -f ./configure ] || ./autogen.sh
to generate the configure
file if
it is not ready yet
Run ./configure
. You might first review any options with
./configure --help
. The defaults are likely fine.
Run make
Run sudo make install
Have a look at man log-user-session
for usage help.
Create the configuration file /etc/log-user-session.conf and integrate the tool into your sshd configuration.
This tool has been so far only tested on Linux.
Konrad Bucheli (kb@open.ch)