Displaying 2 results from an estimated 2 matches for "l1938".
Did you mean:
1938
2023 Jul 05
1
Subsystem sftp invoked even though forced command created
.../session.c#L623-L663
The "subsystem: exec()" comes earlier from
session.c:session_subsystem_req(), which is recording (badly) which
subsystem was requested, but this is before the forced command is applied
in do_exec().
https://github.com/openssh/openssh-portable/blob/V_7_4_P1/session.c#L1938-L1944
Further evidence that this is the case is the audit calls that log the
command being executed:
debug3: mm_audit_run_command entering command
/opt/app/workload/secgov/opt/sact-central/bin/receive.ksh
debug3: mm_audit_end_command entering command
/opt/app/workload/secgov/opt/sact-central/bin/...
2023 Jul 03
1
Subsystem sftp invoked even though forced command created
On 30.06.23 17:56, MCMANUS, MICHAEL P wrote:
> The actual command is similar to the following (parameters inserted to protect the source):
> (print ${FQDN} ; print ${Environment} ; cat ${OutFileXML}) | \
> ssh -Ti ${EmbeddedPrivateKey} \
> -o HostKeyAlias="${Alias}" \
> -o