Tag Info

New answers tagged


The default logging of all ssh/sftp is to syslog AUTH facility edit /etc/openssh/sshd_config change Subsystem internal-sftp -l INFO to Subsystem internal-sftp -l INFO -f LOCAL3 where LOCAL3 is a facility not used by any applications in your system. You can choose any LOCAL0 to LOCAL7 instead of LOCAL3 then open your syslog or rsyslog config and add ...


What error did /etc/init.d/sshd reload give? This is a correct method to make sshd pick-up config changes.


Let us say the chroot is in /path/to/chroot. Then you need: A directory etc in /path/to/chroot, and A file called passwd in /path/to/chroot/etc, with at least one entry: juser:x:5002:5002::/some/path:/some/shell And both: /path/to/chroot/some/path /path/to/chroot/some/shell (The shell must be present, along with any necessary libraries and such.)


I'm pretty sure that 128 MB is more than enough if you're only going to use SSH and AppArmor. I remember Debian taking up less than 64 MB of RAM with just SSH and an Asterisk PBX started.


Try installing fail2ban from EPEL. It's packaged for CentOS 7 and you'll get updates as they are released. Installing the rpm form another repo may work (it did in this case) but is not the best way of doing things. First of all, install the EPEL repository by issuing the following (as root): yum install epel-release The above should install EPEL and ...


The Message of the Day file (/etc/motd) had the strange text in there. I wonder what put that there. I deleted the MOTD file and now my sessions no longer begin with the strange text.


I'd turn up the logging level for the SSH Daemon via the configuration file, /etc/ssh/sshd_config. Typically this section of the configuration file: # Logging # obsoletes QuietMode and FascistLogging #SyslogFacility AUTH SyslogFacility AUTHPRIV #LogLevel INFO Uncomment the LogLevel section and restart SSH service. This should show you where those messages ...

Top 50 recent answers are included