Displaying 2 results from an estimated 2 matches for "user_logout".
2006 Dec 06
2
ssh 4.x using aix 5.3 auditing
...trail = /audit/trail
bin1 = /audit/bin1
bin2 = /audit/bin2
binsize = 10240
cmds = /etc/security/audit/bincmds
freespace = 65536
stream:
cmds = /etc/security/audit/streamcmds
classes:
default = login
init = USER_Login, USER_Logout, USER_Exit, USER_Logout
users:
root = init,default
===========================
below is the output from /audit/stream.out
#:/etc/security/audit # tail -f /audit/stream.out
event login status time command
--------------- -------- ----------- --...
2007 Jan 10
0
ssh 4.x using aix 5.3 auditing
I'm still a bit confused as to how control-d is interpreted in ssh vs telnet. The only thing I can figure is that telnet traps control-d as User_Exit or USER_Logout and ssh interprets it as EOF. If EOF is triggered, then the auditing subsystem doesnt care.
The 'logout' command is only affected if you are NOT logged into the console.
====================
test_citi:/root # grep UseLogin /usr/etc/sshd_config
UseLogin no
test_citi:/root # tty
/dev/pts/0...